CVE-2018-20052

An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices

published April 25, 2019

CVSS
—
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Published
2019-04-25T15:40Z
EPSS history
Timeline
  • 25 APR 15:40Z
    An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices
    cvelistv5