PT-2020-12855
CVE-2020-11799
·
Published
2020-04-15
·
Updated
2020-04-22
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Z-Cron version 5.6 Build 04
Description
The issue allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to.
Recommendations
For Z-Cron version 5.6 Build 04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾