Lucene search
+L

13 matches found

Github Security Blog
Github Security Blog
added 2025/11/13 3:36 p.m.15 views

sudo-rs doesn't record authenticating user properly in timestamp

Summary When Defaults targetpw or Defaults rootpw is enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs prior to 0.2.10 incorrectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the...

4.4CVSS7.1AI score0.00167EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder