VULNERABILITY INTELLIGENCE
CVE-2010-0427
CVSS score4.4 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2010-02-25
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command.