CVE-2019-11847

ALEOS User Root Shell Escalation

High · published August 21, 2020

CVSS v3.1
7.3
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.6th percentile
Published
2020-08-21T18:40Z
EPSS history
Timeline
  • 21 AUG 18:40Z
    ALEOS User Root Shell Escalation
    cvelistv5