Authorization Bypass

2019-01-1509:14:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

sudo is vulnerable to authorization bypass attacks. The vulnerability exists as sudo_noexec.so in before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the

CPENameOperatorVersion
sudoeq1.8.6p3__15.el6
sudoeq1.7.4p5__12.el6_3
sudoeq1.8.6p3__12.el6
sudoeq1.7.2p2__9.el6
sudoeq1.7.4p5__13.el6_3
sudoeq1.8.6p3__7.el6
sudoeq1.7.4p5__9.el6_2
sudoeq1.8.6p3__20.el6_7
sudoeq1.8.6p3__24.el6
sudoeq1.7.4p5__11.el6

Name	Operator	Version
sudo	eq	1.8.6p3__15.el6
sudo	eq	1.7.4p5__12.el6_3
sudo	eq	1.8.6p3__12.el6
sudo	eq	1.7.2p2__9.el6
sudo	eq	1.7.4p5__13.el6_3
sudo	eq	1.8.6p3__7.el6
sudo	eq	1.7.4p5__9.el6_2
sudo	eq	1.8.6p3__20.el6_7
sudo	eq	1.8.6p3__24.el6
sudo	eq	1.7.4p5__11.el6