CVE-2024-28139 | BDVDB-2026-258696 Detail
Image AccessScan2Net
Description#
The www-data user can elevate its privileges because sudo is configured to allow the execution of the mount command as root without a password. Therefore, the privileges can be escalated to the root user. The risk has been accepted by the vendor and won't be fixed in the near future.
Impact#
CAPEC-233 Privilege Escalation
Weaknesses#
- CWE-250 Execution with Unnecessary Privileges
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.