NN-2025:2-01

csafUSnozomi_psirt

Privilege escalation in Guardian/CMC before 24.6.0

view advisory published 2025-06-10

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-13090US——
A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, p…
02

remediations (4)

  • MitigationCMC

    N/A

  • MitigationGuardian

    N/A

  • FixedCMC

    Upgrade to v24.6.0 or later.

  • FixedGuardian

    Upgrade to v24.6.0 or later.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan