Find real vulnerabilities before they ship
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
| Base Score | 4.6 |
|---|---|
| Vector String | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |
