In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://www.nokia.com/networks/products/one-nds/ | product |
https://packetstormsecurity.com/files/171971/Nokia-OneNDS-20.9-Insecure-Permissions-Privilege-Escalation.html | third party advisory vdb entry exploit |