Local Privilege Escalation Vulnerability in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Software

CVE-2020-10384 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account.

Learn more about our Web Application Penetration Testing UK.