Security Advisory

CVE-2014-4867

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-10 10:00:00
Last updated 2024-08-06 11:27:36
Assigner certcc
CVSS score not scored
State PUBLISHED

Description

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.