CVE-2020-15861

Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link (symlink) following.

This flaw does not affect net-snmp as shipped with Red Hat Enterprise Linux 5, 6, 7, or 8. There is no snmp-mibs-downloader package in the repositories and, the net-snmp install process does NOT create a separate low-privilege user account to run snmpd nor does it define in /usr/lib/systemd/system/snmpd.service an ExecStart with a -u or -g option for any other users or groups by default. As there is no low-privileged user created to escalate to root, it's notaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.