CVE-2020-27985

HIGH

7.8

Descricao

Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>/SecurityOnion/setup/so-setup.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado11/23/2020

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

securityonionsolutions:security_onion

Fraquezas (CWE)

CWE-306

Referencias

https://github.com/Security-Onion-Solutions/securityonion/commit/b14670030349a2747a00ace665568ab5f51ac47b(cve@mitre.org)

https://github.com/Security-Onion-Solutions/securityonion/releases(cve@mitre.org)

https://s1gh.sh/cve-2020-27985-security-onion-local-privilege-escalation/(cve@mitre.org)

https://github.com/Security-Onion-Solutions/securityonion/commit/b14670030349a2747a00ace665568ab5f51ac47b(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/Security-Onion-Solutions/securityonion/releases(af854a3a-2127-422b-91ae-364da2661108)

https://s1gh.sh/cve-2020-27985-security-onion-local-privilege-escalation/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.