CVE-2020-7954

An issue was discovered in OpServices OpMon 9.3.2

published February 6, 2020

CVSS
—
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudoers file, which by default allows the execution of programs (e.g. nmap) without the need for a password with sudo.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Published
2020-02-06T16:31Z
EPSS history
Timeline
  • 06 FEB 16:31Z
    An issue was discovered in OpServices OpMon 9.3.2
    cvelistv5