Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2020-8022
SUSE SUSE Enterprise Storage 5 — User-writeable configuration file /usr/lib/tmpfiles.d/tomcat.conf allows for escalation of priviliges
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U H H H 7.8 .0086 57.7 —
AFFECTED
Product Versions Fixed
SUSE Enterprise Storage 5 tomcat – —
SUSE Linux Enterprise Server 12-SP2-BCL tomcat – —
SUSE Linux Enterprise Server 12-SP2-LTSS tomcat – —
SUSE Linux Enterprise Server 12-SP3-BCL tomcat – —
SUSE Linux Enterprise Server 12-SP3-LTSS tomcat – —
SUSE Linux Enterprise Server 12-SP4 tomcat – —
SUSE Linux Enterprise Server 12-SP5 tomcat – —
SUSE Linux Enterprise Server 15-LTSS tomcat – —
SUSE Linux Enterprise Server for SAP 12-SP2 tomcat – —
SUSE Linux Enterprise Server for SAP 12-SP3 tomcat – —
+ 4 more
TIMELINE
Jan 27 Reserved by suse
Jun 29 Published (CNA: suse)
Oct 8 EXPLOIT PUBLISHED — CVE-2020-8022 (SUSE Enterprise Storage 5). Public exploit reference added.
Oct 8 RESCORED — CVE-2020-8022 (SUSE Enterprise Storage 5). CVSS 7.7 → 7.8 (NVD).
Description
A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.
Lifecycle
Complete event history — 4 events, chronological
| Date | Event | Detail |
|---|
| January 27, 2020 | Reserved | Reserved by suse |
| June 29, 2020 | Published | Published (CNA: suse) |
| October 8, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2020-8022 (SUSE Enterprise Storage 5). Public exploit reference added. |
| October 8, 2026 | RESCORED | RESCORED — CVE-2020-8022 (SUSE Enterprise Storage 5). CVSS 7.7 → 7.8 (NVD). |
Affected
Affected products and packages — 14 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| SUSE | SUSE Enterprise Storage 5 | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP2-BCL | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP2-LTSS | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP3-BCL | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP3-LTSS | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP4 | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 12-SP5 | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server 15-LTSS | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server for SAP 12-SP2 | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server for SAP 12-SP3 | — | tomcat | — |
| SUSE | SUSE Linux Enterprise Server for SAP 15 | — | tomcat | — |
| SUSE | SUSE OpenStack Cloud 7 | — | tomcat | — |
| SUSE | SUSE OpenStack Cloud 8 | — | tomcat | — |
| SUSE | SUSE OpenStack Cloud Crowbar 8 | — | tomcat | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2020-8022 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
