CVE-2023-40361

Summary

CVE-2023-40361 is a vulnerability affecting SECUDOS Qiata (DOMOS OS) version 4.13. The issue involves insecure permissions for the previewRm.sh daily cronjob. This means that any low-privileged user on the system can potentially exploit this vulnerability. The concerning aspect is that every user on the system holds write permissions for previewRm.sh, which is executed by the root user. An attacker could potentially manipulate this script to gain elevated privileges and compromise the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.