CVE-2019-19585

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.74% chance of exploitation in the next 30 days, 93rd percentile

Published

2020-01-06

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Executi…

Security advisories

• v1k1ngfr/exploits-rconfig/blob/master/rconfig_lpe.sh
• https://raw.githubusercontent.com/v1k1ngfr/exploits/master/rconfig_lpe.sh?token=

References

• CVE Record
• NVD entry