Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Quest Privilege Manager 权限许可和访问控制问题漏洞
Vulnerability Description
Quest Privilege Manager是一套用户权限管理综合解决方案，它提供了快速提升和管理用户和管理权限所需的核心功能。pmmasterd是其中的一个加密程序。 Quest Privilege Manager 6.0.0-27版本和6.0.0-50版本中的pmmasterd存在安全漏洞。远程攻击者可利用该漏洞写入任意文件，以root权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A