{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T07:16:36Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20100419-CVE-2010-1163","slug":"cisco-sa-20100419-cve-2010-1163","vendor":"Cisco","title":"Sudo sudoedit Local Command Privilege Escalation Vulnerability","summary":"Sudo contains a vulnerability that could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability exists due to an error in the affected software while matching commands due to incorrect path resolution.  A local attacker with privileges to run the sudoedit command could exploit this vulnerability to execute arbitrary commands with root privileges.  An exploit could result in a complete system compromise. Proof-of-concept code that exploits this vulnerability is publicly available. The vendor has confirmed this vulnerability and released updated software. To exploit the vulnerability, an attacker must have local access to the system and be granted special permissions to execute the sudoedit command.  As a result of these requirements, the source of exploits are likely limited to current users of an affected system.  Successful exploitation could allow a local attacker to execute arbitrary shell commands as root, leading to a full system compromise. For this vulnerability to be successful, the attacker passes a command that has the PATH environment variable including a \".\" and not include any other directory that contains a sudoedit command.  Also, a successful exploit requires the ignore_dot or secure_path sudoers options to be disabled.","severity":"Medium","published_at":"2010-04-19T20:43:48Z","updated_at":"2010-04-19T20:43:48Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163/csaf/Cisco-SA-20100419-CVE-2010-1163.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":4,"public_evidence_count":4,"kev_count":0,"highest_epss":0.00402},"cves":[{"id":"CVE-2010-1163","kev":false,"epss":{"score":0.00402,"percentile":0.32552,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco ACE XML Gateway Software","slug":"cisco-ace-xml-gateway-software","vendor":"Cisco"},"cve":{"id":"CVE-2010-1163"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:06:03Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ACE XML Gateway Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-04-19T20:43:48Z","updated_at":"2010-04-19T20:43:48Z","advisory_updated_at":"2010-04-19T20:43:48Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163","row_display_order":1},{"product":{"name":"Cisco TelePresence","slug":"cisco-telepresence","vendor":"Cisco"},"cve":{"id":"CVE-2010-1163"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:06:03Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco TelePresence","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-04-19T20:43:48Z","updated_at":"2010-04-19T20:43:48Z","advisory_updated_at":"2010-04-19T20:43:48Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163","row_display_order":2},{"product":{"name":"Cisco Unified Communications Manager","slug":"cisco-unified-communications-manager","vendor":"Cisco"},"cve":{"id":"CVE-2010-1163"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:06:03Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified Communications Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-04-19T20:43:48Z","updated_at":"2010-04-19T20:43:48Z","advisory_updated_at":"2010-04-19T20:43:48Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163","row_display_order":3},{"product":{"name":"Cisco Transport Manager","slug":"cisco-transport-manager","vendor":"Cisco"},"cve":{"id":"CVE-2010-1163"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T23:06:03Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Transport Manager","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00402,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-04-19T20:43:48Z","updated_at":"2010-04-19T20:43:48Z","advisory_updated_at":"2010-04-19T20:43:48Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20100419-CVE-2010-1163","row_display_order":4}]}