CVE-2020-14004 Path traversal in n/a

What is CVE-2020-14004?

CVE-2020-14004 is a high-severity path traversal vulnerability in Opensuse Backports Sle, published on 12 Jun 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script (run as part of the icinga2 systemd service) executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrary files can be changed to mode 2750 by the unprivileged icinga2 user.

Weakness: CWE-59

Which versions are affected by CVE-2020-14004?

It affects 3 products.

Products include Icinga Icinga, Opensuse Backports Sle, Opensuse Leap.

How do I fix CVE-2020-14004?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2020-14004 being exploited?

There is no known exploitation of CVE-2020-14004 in the wild and no public exploit code.

Other vulnerabilities in Opensuse Backports Sle

• CVE-2025-48057 Icinga 2 certificate renewal might incorrectly renew an invalid certificate Critical 9.3
• CVE-2020-29663 Security feature bypass in n/a Critical 9.1
• CVE-2024-24820 Icinga Director configuration is susceptible to Cross-Site Request Forgery High 8.3
• CVE-2018-6535 Information disclosure in n/a High 8.1
• CVE-2018-6533 Privilege escalation in n/a High 7.8

All Opensuse Backports Sle vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2020-14004, GHSA-xqhq-m8mv-g9wp, UBUNTU-CVE-2020-14004, openSUSE-SU-2020:1820-1.