Description (CNA)
Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/elabit/robotmk/releases/tag/v2.0.1
- https://github.com/elabit/robotmk/commit/78c1174ab2df43813050d0c22e1efb8636f8715e
- https://checkmk.com/werk/16434
- https://github.com/elabit/robotmk/compare/v2.0.0...v2.0.1
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.