CVE-2021-29005

Insecure permission of chmod command on rConfig server 3.9.6 exists

published October 11, 2021

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02154 · 82.0th percentile
Published
2021-10-11T12:04Z
EPSS history
Timeline
  • 11 OCT 12:04Z
    Insecure permission of chmod command on rConfig server 3.9.6 exists
    cvelistv5