[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fstp4NIV1UMnWwNmcqoXIh_dFOkMiQcxtOcfnp8VK1VA":3,"g5a-risk:CVE-2020-8023":234},{"success":4,"data":5,"meta":232},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":93,"references":94,"referencesCount":102,"weaknesses":103,"weaknessesCount":102,"isActivelyExploited":112,"cisaInfo":26,"otxData":26,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":230,"notableEvents":231},"CVE-2020-8023","What is CVE-2020-8023?","A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SECURITY, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to escalate privileges from user ldap to root. This issue affects: SUSE Enterprise Storage 5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Debuginfo 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Debuginfo 11-SP4 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Point of Sale 11-SP3 openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 11-SECURITY openldap2-client-openssl1 versions prior to 2.4.26-0.74.13.1. SUSE Linux Enterprise Server 11-SP4-LTSS openldap2 versions prior to 2.4.26-0.74.13.1,. SUSE Linux Enterprise Server 12-SP2-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP2-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-BCL openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP3-LTSS openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP4 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 12-SP5 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.31.1. SUSE Linux Enterprise Server for SAP 12-SP2 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 12-SP3 openldap2 versions prior to 2.4.41-18.71.2. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.31.1. SUSE OpenStack Cloud 7 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud 8 openldap2 versions prior to 2.4.41-18.71.2. SUSE OpenStack Cloud Crowbar 8 openldap2 versions prior to 2.4.41-18.71.2. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.12.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.3.1.","A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE Enterprise Storage 5, SUSE Linux Enterpris...","2020-09-01T12:15:10.123","2020-09-11T17:50:34.207",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":37,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"meissner@suse.de","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",7.7,2.5,5.2,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":25,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",7.2,3.9,10,0.00407,[46,46,46,46,46,46,46],"High",[50,55,60,64,67,70,74,78,81,83,86,90],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"opensuse","openldap2","*","cpe:2.3:a:opensuse:openldap2:*:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"suse","enterprise_storage","5.0","cpe:2.3:a:suse:enterprise_storage:5.0:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":62,"criteria":63,"vulnerable":4},"openstack_cloud","7.0","cpe:2.3:a:suse:openstack_cloud:7.0:*:*:*:*:*:*:*",{"vendor":56,"product":61,"version":65,"criteria":66,"vulnerable":4},"8.0","cpe:2.3:a:suse:openstack_cloud:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":68,"version":65,"criteria":69,"vulnerable":4},"openstack_cloud_crowbar","cpe:2.3:a:suse:openstack_cloud_crowbar:8.0:*:*:*:*:*:*:*",{"vendor":56,"product":71,"version":72,"criteria":73,"vulnerable":4},"linux_enterprise_server","12","cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",{"vendor":56,"product":75,"version":76,"criteria":77,"vulnerable":4},"linux_enterprise_debuginfo","11","cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp3:*:*:*:*:*:*",{"vendor":56,"product":79,"version":76,"criteria":80,"vulnerable":4},"linux_enterprise_point_of_sale","cpe:2.3:a:suse:linux_enterprise_point_of_sale:11:sp3:*:*:*:*:*:*",{"vendor":56,"product":71,"version":76,"criteria":82,"vulnerable":4},"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*",{"vendor":56,"product":71,"version":84,"criteria":85,"vulnerable":4},"15","cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:ltss:*:*",{"vendor":51,"product":87,"version":88,"criteria":89,"vulnerable":4},"leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":51,"product":87,"version":91,"criteria":92,"vulnerable":4},"15.2","cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",12,[95],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1172698","Suse",[99,100,101],"Exploit","Issue Tracking","Vendor Advisory",1,[104],{"id":105,"name":106,"description":107,"extendedDescription":108,"status":109,"abstraction":110,"structure":111},"CWE-349","Acceptance of Extraneous Untrusted Data With Trusted Data","The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.","","Draft","Base","Simple",false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2020-8023? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-8023, a high severity cyber security vulnerability from 2020. A acceptance of Extraneous Untrusted Data With Trusted Data ...","CVE-2020-8023, CVE-2020-8023 vulnerability, CVE-2020-8023 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, opensuse security, suse security, openldap2 vulnerability, enterprise_storage vulnerability, openstack_cloud vulnerability, openstack_cloud_crowbar vulnerability, linux_enterprise_server vulnerability","\u002Fwhat-is\u002Fcve-2020-8023",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-8023","Cybersecurity","CVE-2020-8023, CVE-2020-8023 vulnerability, CVE-2020-8023 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140,182,203,217],{"Operator":141,"Negate":26,"Nodes":142},"AND",[143,149],{"Operator":144,"Negate":26,"CPEMatch":145},"OR",[146],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":148,"VersionEndIncluding":26},"C4935C06-5C8F-403C-9749-A7734898CF77","2.4.41-18.71.2",{"Operator":144,"Negate":26,"CPEMatch":150},[151,153,155,157,159,161,164,167,170,173,176,179],{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CB13FD29-BB94-4B33-870F-7EC956E87515",{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6A11C023-22C5-409C-9818-2C91D51AE01B",{"Vulnerable":26,"Criteria":66,"MatchCriteriaID":156,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C3BEB21-4080-4258-B95C-562D717AED0B",{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1675CBE5-44D3-4326-AE8B-EEB9E25D783A",{"Vulnerable":26,"Criteria":73,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F84B2729-7B52-4505-9656-1BD31B980705",{"Vulnerable":26,"Criteria":162,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:sap:*:*","3691A00A-D075-437B-A818-C7C26EE73532",{"Vulnerable":26,"Criteria":165,"MatchCriteriaID":166,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:ltss:*:*:*","32C12523-2500-44D0-97EE-E740BD3E61B3",{"Vulnerable":26,"Criteria":168,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:*:sap:*:*","16729D9C-DC05-41BD-9B32-682983190CE0",{"Vulnerable":26,"Criteria":171,"MatchCriteriaID":172,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:-:-:*:*","47FB0003-EFE7-4E9A-8772-27576A771884",{"Vulnerable":26,"Criteria":174,"MatchCriteriaID":175,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp3:*:*:ltss:*:*:*","C6622CD4-DF4B-4064-BAEB-5E382C4B05C8",{"Vulnerable":26,"Criteria":177,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp4:*:*:*:*:*:*","55E8AB88-2347-497B-91DE-AF64E08ED8F3",{"Vulnerable":26,"Criteria":180,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:*:*:*:*","29AE5751-3EA5-4056-8E79-16D8DCD248EF",{"Operator":141,"Negate":26,"Nodes":183},[184,189],{"Operator":144,"Negate":26,"CPEMatch":185},[186],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":187,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":188,"VersionEndIncluding":26},"82F3AA5B-117D-40C8-906C-10EDB9F4A78F","2.4.26-0.74.13.1",{"Operator":144,"Negate":26,"CPEMatch":190},[191,193,196,198,200],{"Vulnerable":26,"Criteria":77,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"58D3B6FD-B474-4B09-B644-A8634A629280",{"Vulnerable":26,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:*","F892F1B0-514C-42F7-90AE-12ACDFDC1033",{"Vulnerable":26,"Criteria":80,"MatchCriteriaID":197,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0FC411C9-9A8A-49D0-B704-2207674778CB",{"Vulnerable":26,"Criteria":82,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F13F07CC-739B-465C-9184-0E9D708BD4C7",{"Vulnerable":26,"Criteria":201,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:*:*:*","7B84C8D3-0B59-40DC-881D-D016A422E8CC",{"Operator":141,"Negate":26,"Nodes":204},[205,210],{"Operator":144,"Negate":26,"CPEMatch":206},[207],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":209,"VersionEndIncluding":26},"64EB69D1-17C9-472E-8C74-0B792D230A6B","2.4.46-9.31.1",{"Operator":144,"Negate":26,"CPEMatch":211},[212,214],{"Vulnerable":26,"Criteria":85,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"293AC7BE-C913-40A1-AAA5-70BE6F3969EB",{"Vulnerable":26,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:suse:linux_enterprise_server:15:*:*:*:*:sap:*:*","C665A768-DBDA-4197-9159-A2791E98A84F",{"Operator":141,"Negate":26,"Nodes":218},[219,224],{"Operator":144,"Negate":26,"CPEMatch":220},[221],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":222,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":223,"VersionEndIncluding":26},"76E06618-6628-4BC6-91CF-2A7CF92FC764","2.4.46-lp151.10.12.1",{"Operator":144,"Negate":26,"CPEMatch":225},[226,228],{"Vulnerable":26,"Criteria":89,"MatchCriteriaID":227,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Vulnerable":26,"Criteria":92,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B009C22E-30A4-4288-BCF6-C3E81DEAF45A",[],[],{"lastModified":11,"cacheTime":233,"version":40},1792264668017,{"score":235,"band":236,"action":237,"scoredAt":238},47,"Medium","Plan remediation","2026-10-16T06:49:18.407343+00:00"]