VULNERABILITY INTELLIGENCE
CVE-2020-7954
CVSS score7.8 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudoers file, which by default allows the execution of programs (e.g. nmap) without the need for a password with sudo.
Weakness classification
- nvd@nist.gov: CWE-306