A problem in the way sudo implemented executing commands with arbitrary user IDs was discovered. If a sudoers item is created to let the attacker to perform a command as any user other than root, the attacker can use this issue to circumvent that restriction.
In this TTP we exploit this vulnerability to run an elevated Pneuma instance.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.