CVE-2014-4867 Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-...
MediumCVSS 6.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cryoserver security appliance | = 7.3.0 | No fix listed |
| cryoserver security appliance | = 7.3.0-a | No fix listed |
| cryoserver security appliance | = 7.3.1 | No fix listed |
| cryoserver security appliance | = 7.3.1-a | No fix listed |
| cryoserver security appliance | = 7.3.2 | No fix listed |
| cryoserver security appliance | = 7.3.3 | No fix listed |
| cryoserver security appliance | = 7.3.4 | No fix listed |
References
- VU#280844 third-party-advisory us-government-resource