CVE-2020-16262 - Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation

HIGH

Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation

Published Oct 28, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.43%

Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-8223		Advisory
https://labs.bishopfox.com/advisories/winston-privacy-version-1.5.4		x_refsource_MISCExploitThird Party Advisory
https://winstonprivacy.com/		x_refsource_MISCProduct

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 28, 2020

Updated Aug 4, 2024

Reserved Jul 31, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Oct 28, 2020

Updated Aug 4, 2024

Exploited since n/a