CVE-2021-30462

2021-04-0814:15:14

Google

osv.dev

vestacp

privilege escalation

cve-2021-30462

sudo configuration

root access

admin user

software security

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

44.4%

JSON

VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts.

References

ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/