CVE-2019-19585

An issue was discovered in rConfig 3.9.3

published January 6, 2020

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05743 · 93.0th percentile
Published
2020-01-06T19:24Z
EPSS history
Timeline
  • 06 JAN 19:24Z
    An issue was discovered in rConfig 3.9.3
    cvelistv5