Description
An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from 4.7.2 up to, but not including, 5.5.6 installed, running as the user trueconf (by exploiting some other vulnerability), can elevate their privileges to root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TrueConf | TrueConf Server | 4.7.2 – < 5.5.6 | 5.5.6 |
References
- KLCERT-26-059: TrueConf Server (Linux). Incorrect Default Permissions third-party-advisory