Medium WID-SEC-2023-1470 1 CVE

ESET Server Security: Schwachstelle ermöglicht Privilegieneskalation

Published Jun 14, 2023 · Updated Jun 14, 2023 · de-DE

Vendor: ESET Product: Server Security Product: Server Security linux < 8.1.823.0 Product: Server Security linux < 9.0.466.0 Product: Server Security linux < 9.1.98.0 Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in ESET Server Security ausnutzen, um seine Privilegien zu erhöhen.

Product

ESET Server Security ist eine Sicherheitslösung für Dateiserver zum Schutz vor z.B. Malware.

Vulnerabilities 1

High 7.8

CVE-2023-2847

Local privilege escalation in ESET products for Linux and MacOS

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions …

ESET Endpoint Antivirus for Linux Endpoint Antivirus for macOS Server Security for Linux Linux macOS

Jun 15, 2023

Revision history

2023-06-14 #1
Initiale Fassung

References

ESET Customer Advisory vom 2023-06-14
https://support.eset.com/en/ca8447-local-privilege-escalation-vulnerability-in-eset-products-for-linux-and-macos-fixed