medium6.8
CVE-2014-4867
Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the s…
Impact
Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cryoserver | Cryoserver Security Appliance | Versions 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4 |