CVE-2019-25016

In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to…

published January 28, 2021

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02706 · 85.8th percentile
Published
2021-01-28T19:38Z
EPSS history
Timeline
  • 28 JAN 19:38Z
    In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to…
    cvelistv5