CVE-2019-19014

Summary

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/

References

• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/

• ←Previous
• Next→