critical9.9
CVE-2022-2104
The www-data (Apache web server) account is configured to run sudo with no password for many commands (including /bin/sh and /bin/bash).
Impact
The www-data (Apache web server) account is configured to run sudo with no password for many commands (including /bin/sh and /bin/bash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secheron | Sepcos Control And Protection Relay Firmware | from 1.23.0 before 1.23.21 from 1.24.0 before 1.24.8 from 1.25.0 before 1.25.3 |