Security Advisory

CVE-2015-5602

7.2

Vulnerability Description

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."
Published Date November 17, 2015
Official Source NIST NVD Advisory