Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in /usr/local/bin/admin.pl, or a hard link attack in (2) chmod or (3) a certain cp command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Accellion Secure File Transfer Appliance 权限提升漏洞
Vulnerability Description
Accellion Secure File Transfer Appliance存在权限提升漏洞。由于没有正确限制带有sudo运行权限的命令和参数，本地管理员可以通过(1)/usr/local/bin/admin.pl脚本中的--file_move 操作的任意参数和(2) chmod 或 (3) 某个 cp 命令的硬连接，获取管理员特权。
CVSS Information
N/A
Vulnerability Type
N/A