CVE-2019-19585

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an “rConfig specific Apache configuration” update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

Recent assessments:

theguly at March 16, 2020 4:47pm UTC reported:

not a real assessment, just a note: sudoers here is a mess, you can achieve LPE through at least other three GTFOBINS.

Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 5