hackers abusing text editors for privilege escalation
some text editors allow 3rd party code to run as a extensions to the application, this provides some benefits but also can be a security risk. a researcher named dor azouri looked at some programs called sublime , vim , emacs , gedit and pico and found that half allow this privilege escalation. for example if i am an system admin and i restrict privileges to certain applications or permissions. these editors allow me to bypass by adding a few lines of code which starts the programs. you can read more on this article.
https://www.securityweek.com/hackers-can-abuse-text-editors-privilege-escalation
https://www.securityweek.com/hackers-can-abuse-text-editors-privilege-escalation
Comments
Post a Comment