| Package | Affected versions | Patched versions |
|---|---|---|
| security onion | ≥ 2.0.0, < 2.3.10 | 2.3.10 |
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>/SecurityOnion/setup/so-setup.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free