In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protectionCreditsJohannes Segitz of SUSEReferenceshttps://bugzilla.suse.com/show_bug.cgi?id=1117592
