CWE Code: 1188
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Insecure Default Initialization of Resource
Summary: an issue was discovered on cerner connectivity engine (cce) 4 devices. the user running the main cce firmware has nopasswd sudo privileges to several utilities that could be used to escalate privileges to root. one example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-04-25
Last Modified Date: 2019-10-03