CVE-2024-39934

Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared…

High · published July 4, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Published
2024-07-04T00:00Z
EPSS history
Timeline
  • 04 JUL 00:00Z
    Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared…
    cvelistv5