Beveiligingsadvies

CVE-2020-14342

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-09-09 11:13:35

Laatst bijgewerkt 2024-08-04 12:39:36

Toegewezen door redhat

CVSS-score 4.4

Status PUBLISHED

Beschrijving

It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary commands. An attacker able to invoke mount.cifs with special permission, such as via sudo rules, could use this flaw to escalate their privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗