CVE-2020-8655highunder attackCWE-269

CVE-2020-8655

Published · Updated

Follow this CVE+ Monitor EyesOfNetwork

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

98Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 60%
from disclosure to weapon1 day
Published on NVDFeb 6
1st PoC+1d
metasploitFeb 6
CISA KEV+636d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A configuration flaw in EyesOfNetwork 5.3 allows the web server user to run any command with root privileges by creating a malicious nmap script, bypassing normal access restrictions.

Technical detail

The sudoers configuration in EyesOfNetwork 5.3 improperly permits the apache user to execute arbitrary commands as root through a specially crafted NSE (Nmap Scripting Engine) script. This privilege escalation vulnerability requires local access to the system but allows complete system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.