CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. See the original NVD description below for full technical details.
CVE
CVE-2019-20373
Severity
HIGH
CVSS
7.8
EPSS
0.43%
Original NVD Description
LTSP LDM through 2.18.06 allows fat-client root access because the LDM_USERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script.
Related CVEs
Other vulnerabilities affecting the same vendor(s)