Local Low Privileged Attacker Can Use Untrusted Search Path to Gain Root Privileges

CVE-2024-28133

Summary

A local low privileged attacker can exploit a vulnerability in the CHARX system utility by leveraging an untrusted search path to escalate their privileges to root. This exploitation method poses significant security risks, as it allows unauthorized users to gain elevated access, potentially leading to further system compromises. Organizations using CHARX system utility should assess their systems for vulnerable versions and implement necessary security measures to mitigate the risk associated with this vulnerability.

References