Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5ff6-r4w3-v8gw

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

EPSS

Процентиль: 14%
0.00047
Низкий

Связанные уязвимости

nvd
больше 20 лет назад

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

EPSS

Процентиль: 14%
0.00047
Низкий