CVE-2019-19014

HIGH

7.8

Descricao

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado12/2/2019

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

titanhq:webtitan

Fraquezas (CWE)

CWE-269

Referencias

https://write-up.github.io/webtitan/(cve@mitre.org)

https://www.webtitan.com/resources/product-updates/(cve@mitre.org)

https://write-up.github.io/webtitan/(af854a3a-2127-422b-91ae-364da2661108)

https://www.webtitan.com/resources/product-updates/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.