ZeroHour

CVE-2020-28169

PoC ×2
CVSS 3.1
7.0 high
EPSS
1%p66
Published
()
Modified
Description

The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.

Vendors
td-agent-builder projectdebian
Products
td-agent-builder, debian linux
Weakness
CWE-732
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.