CVE-2014-7298

adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
VendorProductVersion
centrifydirectcontrol
3.0
centrifydirectcontrol
4.2.0
centrifycentrify_suite
2012.5
centrifycentrify_suite
2014.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://twitter.com/travemme/statuses/525298393971564544
http://www.centrify.com/support/announcements.asp#20141014
https://exploithub.com/centrify-data-leakage.html
http://twitter.com/travemme/statuses/525298393971564544
http://www.centrify.com/support/announcements.asp#20141014
https://exploithub.com/centrify-data-leakage.html