Privilege Escalation Vulnerability in Initi Script

CVE-2024-28137

What is CVE-2024-28137?

A local attacker with low privileges can exploit a time-of-check to time-of-use (TOCTOU) vulnerability in an init script associated with certain versions of the product. This flaw allows the attacker to elevate their privileges, potentially leading to unauthorized access and manipulation of system resources. Proper security measures and timely updates are essential to mitigate the risks associated with this vulnerability.

References