Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39236
HistoryFeb 12, 2023 - 2:41 p.m.

Privilege Escalation

2023-02-1214:41:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
privilege escalation
vulnerable software
resource allocations
promote containers
remote shell
wings daemon security

EPSS

0.001

Percentile

43.3%

github.com/pterodactyl/wings is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker to exploit this vulnerability, they must have an existing server controlled by the Wings Daemon.

EPSS

0.001

Percentile

43.3%