Vulnerability in Labtech Software

CVE-2015-0926

Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file.

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

Affected products

Labtech_software Labtech
N/a — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)