CVE-2020-8655

Опубликовано: 07 фев. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Высокий

Описание

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.

Ссылки

http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/EyesOfNetworkCommunity/eonconf/issues/8
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/156266/EyesOfNetwork-5.3-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156605/EyesOfNetwork-AutoDiscovery-Target-Command-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://github.com/EyesOfNetworkCommunity/eonconf/issues/8
Exploit
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8655
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.81622

Высокий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-269

Связанные уязвимости

GHSA-qhg6-px34-g7qc