CVE-2021-36795 - A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1

Back Back to CVE browser

HIGH

A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1

Published Aug 6, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.0a to 6.6.0b-hotfix1. An underprivileged linux user, if certain environment criteria are met, can gain additional privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23372
Advisory
https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-36795.md
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23372		Advisory
https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-36795.md		x_refsource_MISCThird Party Advisory