Description
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Admin By Request (ABR) | Admin By Request (ABR) | 5.2.2 and below | — |