CVEvulnerability
CVE-2014-4867
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:L/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.
Affected configurations
• cryoserver cryoserver security appliance 7.3.0
• cryoserver cryoserver security appliance 7.3.1
• cryoserver cryoserver security appliance 7.3.2
• cryoserver cryoserver security appliance 7.3.3
• cryoserver cryoserver security appliance 7.3.4
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/280844 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/280844 Third Party Advisory, US Government Resource