CVE-2019-19585

PoC ×3—

CVSS 3.1

7.8 high

EPSS

6%p93

Published

Jan 6, 2020 (Jan 6, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions.

Vendors: rconfig
Products: rconfig
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.7%)

In the news0 stories

No ingested article mentions this CVE yet.