automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -87350,6 +87350,63 @@
 
     ]
   },
+  "exploit_linux/local/progress_flowmon_sudo_privesc_2024": {
+    "name": "Progress Flowmon Local sudo privilege escalation",
+    "fullname": "exploit/linux/local/progress_flowmon_sudo_privesc_2024",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2024-03-19",
+    "type": "exploit",
+    "author": [
+      "Dave Yesland with Rhino Security Labs"
+    ],
+    "description": "This module abuses a feature of the sudo command on Progress Flowmon.\n          Certain binary files are allowed to automatically elevate\n          with the sudo command.  This is based off of the file name.  This\n          includes executing a PHP command with a specific file name. If the\n          file is overwritten with PHP code it can be used to elevate privileges\n          to root. Progress Flowmon up to at least version 12.3.5 is vulnerable.",
+    "references": [
+      "URL-https://rhinosecuritylabs.com/research/cve-2024-2389-in-progress-flowmon/",
+      "URL-https://support.kemptechnologies.com/hc/en-us/articles/24878235038733-CVE-2024-2389-Flowmon-critical-security-vulnerability"
+    ],
+    "platform": "Linux,Unix",
+    "arch": "x86, x64",
+    "rport": null,
+    "autofilter_ports": [
+
+    ],
+    "autofilter_services": [
+
+    ],
+    "targets": [
+      "Automatic"
+    ],
+    "mod_time": "2024-05-29 08:39:06 +0000",
+    "path": "/modules/exploits/linux/local/progress_flowmon_sudo_privesc_2024.rb",
+    "is_install_path": true,
+    "ref_name": "linux/local/progress_flowmon_sudo_privesc_2024",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "SideEffects": [
+        "ioc-in-logs",
+        "artifacts-on-disk"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ]
+    },
+    "session_types": [
+      "shell",
+      "meterpreter"
+    ],
+    "needs_cleanup": true,
+    "actions": [
+
+    ]
+  },
   "exploit_linux/local/progress_kemp_loadmaster_sudo_privesc_2024": {
     "name": "Kemp LoadMaster Local sudo privilege escalation",
     "fullname": "exploit/linux/local/progress_kemp_loadmaster_sudo_privesc_2024",