CVE-2024-45770

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.
Configurations

No configuration.

History

12 Nov 2024, 18:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:9452 -

19 Sep 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:6843 -
  • () https://access.redhat.com/errata/RHSA-2024:6840 -
  • () https://access.redhat.com/errata/RHSA-2024:6846 -
  • () https://access.redhat.com/errata/RHSA-2024:6837 -
  • () https://access.redhat.com/errata/RHSA-2024:6847 -
  • () https://access.redhat.com/errata/RHSA-2024:6844 -
  • () https://access.redhat.com/errata/RHSA-2024:6842 -
  • () https://access.redhat.com/errata/RHSA-2024:6848 -

19 Sep 2024, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-19 09:15

Updated : 2024-11-12 18:15


NVD link : CVE-2024-45770

Mitre link : CVE-2024-45770


JSON object : View

Products Affected

No product.

CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')