Filtered by vendor Cloudlinux Subscriptions
Filtered by product Cagefs Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-36772 1 Cloudlinux 1 Cagefs 2024-03-28 4.4 Medium
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.
CVE-2020-36771 1 Cloudlinux 1 Cagefs 2024-03-28 7.8 High
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.