PoC Index

CVE-2019-19585

HIGH 7.8EPSS 5.7%

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

CVSS v3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS
5.74% chance of exploitation in the next 30 days, 93th percentile
Published
2020-01-06
Updated
2024-08-05

Proof-of-concept exploits (1)

References

Related