A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11     clients. This flaw allows an attacker to take control of an X application by impersonating the server it     is expecting to connect to. (CVE-2020-25697)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3189-1 advisory.

  - A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11     clients. This flaw allows an attacker to take control of an X application by impersonating the server it     is expecting to connect to. (CVE-2020-25697)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3190-1 advisory.

  - A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11     clients. This flaw allows an attacker to take control of an X application by impersonating the server it     is expecting to connect to. (CVE-2020-25697)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
229904	Linux Distros Unpatched Vulnerability : CVE-2020-25697	Nessus	Misc.	high
179384	SUSE SLES12 Security Update : xtrans (SUSE-SU-2023:3189-1)	Nessus	SuSE Local Security Checks	high
179382	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xtrans (SUSE-SU-2023:3190-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-25697

high

Tenable Plugins

high

high

high