PT-2020-7138

Name of the Vulnerable Software and Affected Versions Shaman version 1.0.9 Description The issue allows users to gain root privileges without entering the root password by adding the line askforpwd=false to the shaman.conf file. This configuration change enables root access the next time Shaman i...