CVE-2024-13090: Privilege escalation in Guardian/CMC before 24.6.0
A privilege escalation vulnerability may enable a service account to elevate its privileges.
The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account.
It is important to note that no such vector has been identified in this instance.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13090?
CVE-2024-13090 has a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2024-13090?
To fix CVE-2024-13090, review and tighten the sudo rules for local service accounts to eliminate excessive privileges.
What systems are affected by CVE-2024-13090?
CVE-2024-13090 affects any system where overly permissive sudo rules have been configured for local service accounts.
Could CVE-2024-13090 lead to unauthorized access?
Yes, CVE-2024-13090 could allow malicious actors to gain unauthorized administrative access through privilege escalation.
Is CVE-2024-13090 exploitable remotely?
CVE-2024-13090 typically requires local access, but if exploited, it can lead to significant security risks.