CVE-2020-28169
HIGHtd-agent-builder < 2020-12-18 - Privilege Escalation via Writable bin Directory
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2020-28169. PoCs published by Adrian Bondocea, zubrahzz.
AI-analyzed exploit summary This exploit describes an insecure folder permission vulnerability in Fluentd TD-agent plugin before 4.0.1, where the bin directory is writable by authenticated users but executed as NT AUTHORITY\SYSTEM. The writeup provides details on the vulnerable path and service but does not include executable exploit code.
Description
The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.
Exploits (2)
This exploit describes an insecure folder permission vulnerability in Fluentd TD-agent plugin before 4.0.1, where the bin directory is writable by authenticated users but executed as NT AUTHORITY\SYSTEM. The writeup provides details on the vulnerable path and service but does not include executable exploit code.
This repository contains a README describing CVE-2020-28169, an insecure folder permission vulnerability in FluentD TD-agent for Windows leading to privilege escalation. No exploit code is provided, only a download URL for the vulnerable software.
References (8)
Scores
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H