CVE-2019-3696

CVE-2019-3696 describes an improper limitation of a pathname vulnerability in the pcp package across various SUSE Linux Enterprise and openSUSE Leap distributions. This flaw allows a local user, specifically the 'pcp' user, to overwrite arbitrary files with arbitrary content. Rated with a CVSS score of 7.3 (High), the vulnerability has a local attack vector with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.