CVE-2014-4867

Cryoserver Security Appliance 7.3.x is affected by a privilege-escalation issue due to weak permissions on the /etc/init.d/cryoserver script. The default support account can modify this script and leverage /bin/cryo-mgmt to gain elevated privileges, potentially yielding root on the device. Techni...