CVE-2020-10286CWE-656
RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS
Critical · published July 15, 2020
What it is
the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.
The record
Technical detail
- CVSS v3.0
- 9.4 · CRITICAL
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00744 · 54.2th percentile
- Weakness
- CWE-656 · Reliance on Security Through Obscurity
- Published
- 2020-07-15T21:15Z
EPSS history
Timeline