CVE-2020-36772

Publication date

2024-01-22 14:11:25

Family

redhat

State

PUBLISHED

Description

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.