2024-12-11 15:36:49
SEC-VLab
PUBLISHED
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and wont be fixed in the near future.