Threats tagged 'ghsa-pmvj-vgj4-9cg7'

Telenia Software TVox versions 26.5.3 and earlier 26.x, as well as 24.9.21 and earlier 24.x, contain a privilege escalation vulnerability. This flaw allows an attacker with access to the apache user account to execute arbitrary commands as root by exploiting an insecure sudoers configuration. The sudoers file grants the apache user passwordless execution of /bin/nice, which can be leveraged to run commands with root privileges. The vulnerability has a high severity rating with a CVSS score of 8.5.