# CVE-2020-8027

## Summary

- **CVE ID:** CVE-2020-8027
- **Severity:** HIGH
- **CVSS Score:** 7.3 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
- **CWE:** CWE-377
- **Published:** Feb 11, 2021
- **Last Modified:** Mar 14, 2026

## Description

A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE Linux Enterprise Server 15-LTSS openldap2 versions prior to 2.4.46-9.37.1. SUSE Linux Enterprise Server for SAP 15 openldap2 versions prior to 2.4.46-9.37.1. openSUSE Leap 15.1 openldap2 versions prior to 2.4.46-lp151.10.18.1. openSUSE Leap 15.2 openldap2 versions prior to 2.4.46-lp152.14.9.1.

## Affected Products

- SUSE — SUSE Linux Enterprise Server 15-LTSS (openldap2)
- SUSE — SUSE Linux Enterprise Server for SAP 15 (openldap2)
- openSUSE — openSUSE Leap 15.1 (openldap2)
- openSUSE — openSUSE Leap 15.2 (openldap2)

## References

- [CNA](https://bugzilla.suse.com/show_bug.cgi?id=1175568)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.04%
- **EPSS Percentile:** 12.4

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._