TI-2020-06499 Aliases CVE-2020-8029 GHSA-3hfm-p6g2-9fv7

skuba: Insecure handling of private key

LOW 19CWE-732Published 2021-02-11 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platform 4.5 skuba versions prior to https://github.com/SUSE/skuba/pull/1416.

Why it matters now

EPSS 0.00294 22nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed SUSE CaaS Platform 4.5 (SUSE): https://github.com/SUSE/skuba/pull/1416

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SUSE	SUSE CaaS Platform 4.5	skuba to before https://github.com/SUSE/skuba/pull/1416	https://github.com/SUSE/skuba/pull/1416	Patch available	CNA

SUSE CaaS Platform 4.5 VendorSUSE Affected skuba to before https://github.com/SUSE/skuba/pull/1416 Fixed in https://github.com/SUSE/skuba/pull/1416 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:suse:caas_platform:4.5:::::::*	4.5	Vulnerable	SUSE

cpe:2.3:a:suse:caas_platform:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·SUSE

Remediation

Fix · CNA SUSE CaaS Platform 4.5 (SUSE) Fixed in https://github.com/SUSE/skuba/pull/1416

Timeline

2026-10-02 Threatist record created from CVE-2020-8029
2026-10-03 Alias added: GHSA-3hfm-p6g2-9fv7

References

Exploit 1

https://bugzilla.suse.com/show_bug.cgi?id=1177362

TI-2026-23989 crypto: algif_aead - Revert to operating out-of-place KEVCVSS 3.1HIGH 7.8
TI-2017-13226 The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before… CVSS 3.1CRITICAL 9.8
TI-2019-02704 Insecure API port exposed to all Master Node guest containers CVSS 3.1HIGH 8.4
TI-2022-10358 In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip=… CVSS 3.1HIGH 7.8
TI-2020-06500 skuba: Insecure /tmp usage when joining node to cluster CVSS 3.1MEDIUM 4.4
TI-2018-04832 The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files CVSS 3.0LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences