Vendors / Opendoas Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Opendoas Project records in CISA KEV No Opendoas Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00637 · Published 2023-03-14 · No fix listed CWE-269
Priority MEDIUM 43
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02823 · Published 2021-01-28 · No fix listed CWE-459
Open these records in search → All records by CVSS severity
0 2 0 0 0
