4 ms·
Local privilege escalation isnt just a problem on shell account sharing - it turns a "this image uploader has a weird RCE" into "I have root and compromised the
by malux85 2y ago
Local privilege escalation isnt just a problem on shell account sharing - it turns a "this image uploader has a weird RCE" into "I have root and compromised the application server, stole the database credentials and moved laterally through the network", thats why they still have relativly high (>=7) CVE scores
- technion 2y agoThe majority of the time its the same problem though. An rce in an image uploader running as your Web apps user will almost always allow me access to your database, since that web app uses that database by definition.
- deleted 2y ago[deleted]
- malux85 2y agoAnd root means you can hide your tracks easier, find IDS, install secondary backdoors, and a zillion other things that a normal user can’t do It’s only the same thing if you’re some ham-fisted script kiddie stealing the database, loudly in broad daylight. the pros stay unseen.