CVE-2021-30462

Name of the Vulnerable Software and Affected Versions VestaCP versions prior to 0.9.8-25

Description The issue allows the admin user to escalate privileges to root due to the Sudo configuration not requiring a password to run /usr/local/vesta/bin scripts.

Recommendations For versions prior to 0.9.8-25, update to version 0.9.8-25 or later to resolve the issue. As a temporary workaround, consider modifying the Sudo configuration to require a password for running /usr/local/vesta/bin scripts.