Incorrect Privilege Assignment in Hestia Control Panel - CVE-2022-2626
Published: August 8, 2022
Vulnerability identifier: #VU66179
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-2626
CWE-ID: CWE-266
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote administrator to escalate privileges on the system.
The vulnerability exists due to incorrect permission assignment in Ubuntu, which leads to security restrictions bypass and privilege escalation.
Affected software
Hestia Control Panel
How to mitigate CVE-2022-2626
Install updates from vendor's website.
Hestia Control Panel - update to 1.6.6