CVE-2020-11799

CRITICAL

z-cron 5.6 Build 04 - Unauthenticated Privilege Escalation via Task Modification

Title source: llm

Description

Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://blog.spookysec.net/zcron/

Scores

CVSS v3 9.8

EPSS 0.0118

EPSS Percentile 63.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-269

Status published

Products (1)

z-cron/z-cron 5.6 build_04

Published Apr 15, 2020

Tracked Since Feb 18, 2026