Lucene search

K
cvelistMitreCVELIST:CVE-2021-23240
HistoryJan 12, 2021 - 8:17 a.m.

CVE-2021-23240

2021-01-1208:17:44
mitre
www.cve.org
7
cve-2021-23240
privilege escalation
sudoedit
selinux
permissive mode

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

40.7%

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.