Beveiligingsadvies

CVE-2019-25241

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-24 19:27:58
Laatst bijgewerkt 2026-07-15 01:23:42
Toegewezen door VulnCheck
CVSS-score 9.8
Status PUBLISHED

Beschrijving

FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Attackers can leverage the insecure sudoers configuration to escalate privileges and gain root access by executing sudo commands without authentication.