ID:6605 - Exploit for Incorrect permission assignment for critical resource in td-agent-builder - CVE-2020-28169

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect permissions assignment for the bin directory in the td-agent-builder plugin for Fluentd. A local user overwrite arbitrary files in the bin directory, which are later executed with elevated privileges.

Remediation