CVE-2015-5602

CVE-2015-5602 describes a privilege escalation vulnerability in sudoedit, affecting Sudo versions prior to 1.8.15. A local attacker can exploit this flaw by leveraging a symlink attack on files defined with multiple wildcards in /etc/sudoers, such as "/home/*/*/file.txt". This vulnerability carries a high CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), indicating that a local attacker with low complexity can achieve complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and showing no active exploitation or significant community discussion, public exploit code is available on ExploitDB (EDB-37710).