Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8, the local www-data user has sudo privileges to execute grep as root without a password, which allows an attacker to obtain sensitive information via a grep of a /root/*.db or /etc/shadow file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QuickBox 安全漏洞
Vulnerability Description
QuickBox是QuickBox团队的一套媒体服务器应用程序和服务管理系统。该系统支持使用仪表板实现应用程序的安装和管理，使用户能够与媒体服务器进行交互。 QuickBox Community Edition 2.5.5及之前版本和Pro Edition 2.1.8及之前版本中存在安全漏洞，该漏洞源于拥有sudo权限的本地www-data用户无需密码便可以root权限执行grep。攻击者可利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A