Security Advisory

CVE-2019-19014

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-02 16:46:21
Last updated 2024-08-05 02:02:39
Assigner mitre
State PUBLISHED

Description

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.