Privilege Escalation

2021-12-1512:34:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

opencastproject

privilege escalation

authenticated attacker

local files

read access

vulnerability

EPSS

0.001

Percentile

50.1%

JSON

org.opencastproject:opencast-ingest-service-impl is vulnerable to privilege escalation. An authenticated attacker is able to extract secrets from the host machine via exploiting local files with read access resulting in privilege escalation vulnerability.

References

github.com/opencast/opencast/blob/69952463971cf578363e3b97d8edaf334ff51253/modules/ingest-service-impl/src/main/java/org/opencastproject/ingest/impl/IngestServiceImpl.java#L1587

github.com/opencast/opencast/commit/65c46b9d3e8f045c544881059923134571897764

github.com/opencast/opencast/security/advisories/GHSA-59g4-hpg3-3gcp

mvnrepository.com/artifact/org.opencastproject/opencast-ingest-service-impl