Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wv45-cw2m-63r8

Опубликовано: 22 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by all users. Other users on the system can read the daemon's key and use it to log in, leading to privilege escalation.

MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by all users. Other users on the system can read the daemon's key and use it to log in, leading to privilege escalation.

EPSS

Процентиль: 11%
0.00038
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 5.3
nvd
6 месяцев назад

MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by all users. Other users on the system can read the daemon's key and use it to log in, leading to privilege escalation.

EPSS

Процентиль: 11%
0.00038
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-266