Progress Flowmon Privilege Escalation Vulnerability

In Progress Flowmon versions prior to 12.5.6, a vulnerability allows users with access to the default Flowmon system account via SSH to potentially escalate privileges to root. This issue arises because certain system configuration files have incorrect file permissions, which can be exploited during service initialization.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain root access on the system.

Remediation

Users are advised to upgrade to Progress Flowmon version 12.5.6 or later. Upgrade packages are available through the Progress Community Portal. Note that upgrading will cause a system outage.