Security Onion
1 CVEs
product
Monthly
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.
Authentication Bypass
Security Onion
NVD
GitHub
CVSS 3.1
7.8
EPSS
0.5%
EPSS 1%
CVSS 7.8
HIGH
POC
PATCH
This Week
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.
Authentication Bypass
Security Onion
NVD
GitHub