← CVE Intelligence

CVE-2024-13090

Privilege escalation in Guardian/CMC before 24.6.0 PUBLISHED

Description (CNA)

A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account. It is important to note that no such vector has been identified in this instance.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / Guardianaffected 0 before 24.6.0
Nozomi Networks / CMCaffected 0 before 24.6.0

CWE

CWE-250

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.