CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: log-user-session version 0.7 and earlier contains a directory traversal vulnerability in main suid-binary /usr/local/bin/log-user-session that can result in user to root privilege escalation. this attack appear to be exploitable via malicious unprivileged user executes the vulnerable binary/(remote) environment variable manipulation similar shell-shock also possible.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-20
Last Modified Date: 2019-01-07