high7.8
CVE-2020-10589
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are execute…
Impact
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| V2rayl Project | V2rayl | Version 2.1.3 |