Sangfor aTrust ExecStartPre Command Modification Vulnerability

A vulnerability in Sangfor aTrust versions through 2.4.10 allows users to alter the ExecStartPre command. This could potentially be exploited to modify the behavior of the application during its startup process.

Impact

Modifying the ExecStartPre command could change how the application initializes, potentially leading to unauthorized actions or behaviors.

Reproduction

The vulnerability can be reproduced by an authenticated user who has access to modify service commands. After logging into the aTrust application, the user can navigate to the service configuration settings and change the ExecStartPre command to include malicious or unintended instructions.