The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-12-24T14:36:09
Updated: 2024-08-04T16:33:57.773Z
Reserved: 2020-11-02T00:00:00
Link: CVE-2020-28169
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-12-24T15:15:12.950
Modified: 2022-04-05T16:04:54.263
Link: CVE-2020-28169
Redhat
No data.