CVE-2015-4548

RSA Web Threat Detection before 5.1 SP1 is affected by CVE-2015-4548, a local privilege-escalation flaw where a user with a service account can inject commands into a service configuration file to obtain root privileges. The issue stems from writing to the configuration file, enabling local explo...