CVE-2020-1398 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-1398 Interim 1 16 2025-04-07T23:47:26Z current 2021-05-30T14:35:03Z 2025-04-07T23:47:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-1398 An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly., aka 'Windows Lockscreen Elevation of Privilege Vulnerability'. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE Linux Enterprise Module for Web and Scripting 15 SP2 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3_0-api tomcat-javadoc tomcat-jsp-2_3-api tomcat-lib tomcat-servlet-4_0-api tomcat-webapps tomcat as a component of SUSE CaaS Platform 4.0 tomcat-admin-webapps as a component of SUSE CaaS Platform 4.0 tomcat-el-3_0-api as a component of SUSE CaaS Platform 4.0 tomcat-jsp-2_3-api as a component of SUSE CaaS Platform 4.0 tomcat-lib as a component of SUSE CaaS Platform 4.0 tomcat-servlet-4_0-api as a component of SUSE CaaS Platform 4.0 tomcat-webapps as a component of SUSE CaaS Platform 4.0 tomcat as a component of SUSE Enterprise Storage 6 tomcat as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-lib as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat-webapps as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS tomcat as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-admin-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-lib as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat-webapps as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP2 tomcat as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 15 SP1-LTSS tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 tomcat as a component of SUSE OpenStack Cloud 9 tomcat-admin-webapps as a component of SUSE OpenStack Cloud 9 tomcat-docs-webapp as a component of SUSE OpenStack Cloud 9 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud 9 tomcat-javadoc as a component of SUSE OpenStack Cloud 9 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud 9 tomcat-lib as a component of SUSE OpenStack Cloud 9 tomcat-servlet-4_0-api as a component of SUSE OpenStack Cloud 9 tomcat-webapps as a component of SUSE OpenStack Cloud 9 tomcat as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-admin-webapps as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-docs-webapp as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-javadoc as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-lib as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-servlet-4_0-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-webapps as a component of SUSE OpenStack Cloud Crowbar 9 An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.The security update addresses the vulnerability by ensuring that the Ease of Access dialog is handled properly., aka 'Windows Lockscreen Elevation of Privilege Vulnerability'. CVE-2020-1398 SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-admin-webapps SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-el-3_0-api SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-jsp-2_3-api SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-lib SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-servlet-4_0-api SUSE Linux Enterprise Module for Web and Scripting 15 SP2:tomcat-webapps important 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H