Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-12381

Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AlgoSec

Description

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file.  This issue affects Firewall Analyzer: A33.0, A33.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AlgoSec Firewall Analyzer

Default version status: unaffected

  • A33.0 (up to build 320)affected
  • A33.10 (up to build 220)affected

References