A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the server it is expecting to connect to.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - xorg-x11-server: local privilege escalation (CVE-2020-25697)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3189-1 advisory.

  - A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11     clients. This flaw allows an attacker to take control of an X application by impersonating the server it     is expecting to connect to. (CVE-2020-25697)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:3190-1 advisory.

  - A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11     clients. This flaw allows an attacker to take control of an X application by impersonating the server it     is expecting to connect to. (CVE-2020-25697)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198535	RHEL 8 : xorg-x11-server (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
179384	SUSE SLES12 Security Update : xtrans (SUSE-SU-2023:3189-1)	Nessus	SuSE Local Security Checks	high
179382	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xtrans (SUSE-SU-2023:3190-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-25697

high

Tenable Plugins

high

high

high