CVE-2020-10588

Publication date

2020-03-15 20:25:10

Family

mitre

State

PUBLISHED

Description

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo.