CVE-2020-27985

CVE-2020-27985 describes an incorrect sudo configuration in Security Onion v2 prior to version 2.3.10, allowing an administrative user to gain root access without a password by modifying and executing the 'so-setup' script. This vulnerability carries a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.