Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Exploitability
AV:LAC:HPR:LUI:NScope
S:CImpact
C:NI:LA:N2.8/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:NAccess Control