CVEvulnerability
CVE-2014-7298
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.
Affected configurations
• centrify directcontrol 3.0
• centrify directcontrol 4.2.0
• centrify centrify suite 2008
• centrify centrify suite 2012
• centrify centrify suite 2012.5
• centrify centrify suite 2014.1
Related
Weakness · not in database (1)
References
- http://twitter.com/travemme/statuses/525298393971564544 twitter.com
- http://www.centrify.com/support/announcements.asp#20141014 www.centrify.com
- https://exploithub.com/centrify-data-leakage.html exploithub.com
- http://twitter.com/travemme/statuses/525298393971564544 twitter.com
- http://www.centrify.com/support/announcements.asp#20141014 www.centrify.com
- https://exploithub.com/centrify-data-leakage.html exploithub.com