CVE-2021-28250

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid and/or setgid file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that ar...

CVE-2021-28250

CA eHealth Performance Manager up to v6.3.2.12 is affected by a privilege-escalation vulnerability via a setuid/setgid file. When a component is run as an argument to the runpicEhealth executable, the script can execute as the ehealth user. The issue affects products no longer supported by the ma...