Post #2886320

@icing@chaos.social The only reason they are CVE's is because of privilege escalation. I'm trying to make colleagues and customers to understand that while yes, these are serious issues, but an attacker would already usually need to have shell access to the system in order to perform the exploits. If that's the case, they have other more security issues. Especially when the server is on a private network without any public entrances