CVE-2011-1551: Novell Opensuse Factory

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

SUSE openSUSE Factory assigns ownership of the /var/log/cobbler/ directory tree to the web-service user account, which might allow local users to gain privileges by leveraging access to this account during root filesystem operations by the Cobbler daemon.

Affected products

• Novell Opensuse Factory: any version

Published 2011-03-30. Last modified 2026-06-16.