CVE-2020-36771

2024-01-2213:53:35

CWE-214

redhat

www.cve.org

cloudlinux

authentication token

vulnerability

local users

process list

code execution

EPSS

Percentile

14.2%

JSON

CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "cagefs",
    "vendor": "Cloudlinux OS",
    "versions": [
      {
        "status": "affected",
        "version": "7.1.1-1"
      },
      {
        "status": "unaffected",
        "version": "7.1.2-2"
      }
    ]
  }
]