CVE-2025-53882

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-53882
A Improper Check for Dropped Privileges vulnerability in the logrotate setup of openSUSE Tumbleweed mailman3 allows the mailman user to create files as root, allowing for a potential privilege escalation. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53882
Configurations

No configuration.

History

31 Jul 2025, 12:15

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de dependencia de entradas no confiables en una decisión de seguridad en la configuración de logrotate para el paquete openSUSEs mailman3 permite una posible escalada de mailman a root. Este problema afecta a openSUSE Tumbleweed: desde ? antes de 3.3.10-2.1.
Summary (en) A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to root. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1. (en) A Improper Check for Dropped Privileges vulnerability in the logrotate setup of openSUSE Tumbleweed mailman3 allows the mailman user to create files as root, allowing for a potential privilege escalation. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
CWE CWE-807 CWE-273
CVSS v2 : unknown
v3 : 9.1 		v2 : unknown
v3 : 4.4

24 Jul 2025, 07:15

Type Values Removed Values Added
Summary (en) A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1. (en) A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to root. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

23 Jul 2025, 19:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

23 Jul 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-23 10:15

Updated : 2025-07-31 12:15

NVD link : CVE-2025-53882

Mitre link : CVE-2025-53882

CVE.ORG link : CVE-2025-53882

JSON object : View

Products Affected

No product.

CWE
CWE-273

Improper Check for Dropped Privileges