CVE-2019-19585

CVE-2019-19585 describes a local privilege escalation vulnerability in rConfig 3.9.3. An attacker can exploit an rConfig-specific Apache configuration update to gain elevated privileges through modifications to the /etc/sudoers file, bypassing local security restrictions. This vulnerability carries a CVSS score of 7.8 (High), indicating a significant impact on confidentiality, integrity, and availability, with low attack complexity and no user interaction required. While the EPSS score is low, suggesting limited real-world exploitation, there is currently no public exploit code available, nor any evidence of active exploitation or significant community discussion.