CVE-2019-18822 in Call Recording信息

摘要

由 VulDB • 2026-05-18

ZOOM Call Recording 6.3.1 中存在一个权限提升漏洞，允许其用户账户（即程序运行的账户，默认为 callrec 账户）通过滥用 [email protected] 将权限提升至 root。[email protected] 以 root 权限启动 /opt/callrec/bin/rs 二进制文件，而该二进制文件由 callrec 拥有。攻击者可以将其替换为特洛伊木马。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2019-11-07

管理

已接受

条目

VDB-153106

CPE

准备好

CWE

CWE-269 (已确认)

CVSS

8.8 (NVD)

EPSS

0.01356

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-18822
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-18822
CVE Details	https://www.cvedetails.com/cve/CVE-2019-18822/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!