CVE-2019-25066 is a critical privilege escalation vulnerability affecting Ajenti version 2.1.31, specifically within an unknown component of its API. This flaw allows a remote attacker to gain elevated privileges, posing a significant risk to affected systems. With a CVSS score of 8.8 (High) and an EPSS score indicating high exploitability, the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to high confidentiality, integrity, and availability impacts. Publicly disclosed exploit code, including a Metasploit module, exists, though there is currently no evidence of active exploitation in the wild or significant community discussion. Upgrading to Ajenti version 2.1.32 is recommended to remediate this issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.1.31CPE matchmatch criteria | cpe:2.3:a:ajenti:ajenti:2.1.31:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.