Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-13090

Privilege escalation in Guardian/CMC before 24.6.0

Description

A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account. It is important to note that no such vector has been identified in this instance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Guardian

Default version status: unaffected

  • 0 to < 24.6.0affected

Nozomi Networks CMC

Default version status: unaffected

  • 0 to < 24.6.0affected

References