CVE-2023-41807 - Linux Local Privilege Escalation Via GoTTY Page

Back Back to CVE browser

CRITICAL

Linux Local Privilege Escalation Via GoTTY Page

Published Nov 23, 2023

9.1

CRITICAL

CVSS 3.1

EPSS 0.73%

Description

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows a user to escalate permissions on the system shell. This issue affects Pandora FMS: from 700 through 773.

Affected products

Vendor Pandora FMS Product Pandora FMS Default
unaffected
- Version
  700
  Status
  affected
  Constraints
  <=773

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pandora FMS

unaffected

Version	Status	Constraints
700	affected	<=773

Remediation

Vendor solution

Fixed in v774 and v772.2.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (1)

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner PandoraFMS

Published Nov 23, 2023

Updated Oct 15, 2024

Reserved Sep 1, 2023

Link CVE-2023-41807

CISA Vulnrichment

Updated Oct 15, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-41807

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-41807