1 matches found
GHSA-Q428-6V73-FC4Q sudo-rs doesn't record authenticating user properly in timestamp
Summary When Defaults targetpw or Defaults rootpw is enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs prior to 0.2.10 incorrectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the...
4.4CVSS7.3AI score0.00167EPSS
SaveExploits0References5
20