CVE-2020-36771
22.01.2024, 14:15
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cloudlinux | cagefs | 𝑥 < 7.1.2-2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-214 - Invocation of Process Using Visible Sensitive InformationA process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
- CWE-200 - Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
References