Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
CloudLinux Inc records in CISA KEVNo CloudLinux Inc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 54
CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command.
CVSS 3.1MEDIUM 4.4· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2024-01-22 · Fixed in 7.1.1-1 CWE-73
Priority LOW 37
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2024-01-22 · Fixed in 7.1.2-2 CWE-214
Open these records in search →