3 matches found
CVE-2021-30462
VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts...
CVE-2021-30462
VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts...
CVE-2021-30462
CVE-2021-30462 affects VestaCP up to version 0.9.8-24. The root cause is a sudo configuration that does not require a password to run /usr/local/vesta/bin scripts, enabling an admin to escalate privileges to root. Documented impact is privilege escalation to root; exploitation details are not pro...