CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-07
EyesOfNetwork 5.3 Local Privilege Escalation via Misconfigured Sudoers (CVE-2020-8655) Technical Analysis and Hardening Guide
[Affected Scope] EyesOfNetwork version 5.3 and potentially prior versions.
[Impact] An attacker with apache web server privileges can execute arbitrary commands as root by leveraging nmap's NSE scripting engine via misconfigured sudoers permissions.
[Mitigation] Remove or restrict the apache user's sudo privileges for nmap in the sudoers configuration, and upgrade to the patched version.