Beveiligingsadvies

CVE-2023-25355

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-04 00:00:00
Laatst bijgewerkt 2025-02-13 15:51:55
Toegewezen door mitre
CVSS-score 8.8
Status PUBLISHED

Beschrijving

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run commands as the `daemon` user on a sipXcom server can overwrite a service file, and escalate their privileges to `root`.