Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-40361
HistoryOct 20, 2023 - 12:00 a.m.

CVE-2023-40361

2023-10-2000:00:00
mitre
github.com
3
secudos qiata
domos os
insecure permissions
previewrm.sh
cronjob
low-privileged user
write permission
root user

AI Score

6.9

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-40361