← Return to the roomGITHUB ↗

ARCHIVED FIELD NOTES / CVES

CVE-2019-19268

Walkthrough · CVEs

An original archive entry. Its publication date and source document are preserved.

More CVEs files →

ORIGINAL RESEARCH DESTINATION

rConfig 3.9.2

Privilege escalation through sudo permissions

Research by TheCyberGeek and dmw0ng into overly broad sudo permissions in rConfig. The original publication demonstrates several ways that the apache account can use permitted system utilities to act as root.

The original site linked this entry to an external publication. The source below contains the research or proof of concept.

Published on github.com.