Privilege escalation in Guardian/CMC before 24.6.0
Vulnerability Description
A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account. It is important to note that no such vector has been identified in this instance.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-13090
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- IOActive found this issue during a VAPT testing session commissioned by one of our customers.
More from Nozomi Networks
View All →Affected Vendor
Nozomi Networks
View all reports →