Pcp: exposure of the redis server backend allows remote command execution via pmproxy
Priority MEDIUM 42CWE-668Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01067 64th percentileScored 2026-11-07
Fix Fixed Red Hat: 8 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | pcp | 4.3.4 and later | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 5.3.7-20.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — | 5.0.2-8.el8_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 5.2.5-7.el8_4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | — | 5.2.5-7.el8_4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | — | 5.2.5-7.el8_4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | — | 5.3.5-9.el8_6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | — | 5.3.7-18.el8_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 6.2.0-2.el9_4 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | — | 5.3.5-9.el9_0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 6.0.1-6.el9_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
- pcp Vendor— Affected 4.3.4 and later Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 5.3.7-20.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 5.0.2-8.el8_2 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 5.2.5-7.el8_4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 5.2.5-7.el8_4 Patch available CNA
- Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 5.2.5-7.el8_4 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 5.3.5-9.el8_6 Patch available CNA
- Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 5.3.7-18.el8_8 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 6.2.0-2.el9_4 Patch available CNA
- Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 5.3.5-9.el9_0 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 6.0.1-6.el9_2 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
CPE names CNA · 13
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:rhel_aus:8.2::appstream | 8.2 | — | Red Hat |
| cpe:/a:redhat:rhel_aus:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_tus:8.4::appstream | 8.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:8.6::appstream | 8.6 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:8.8::appstream | 8.8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.0::appstream | 9.0 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.2::appstream | 9.2 | — | Red Hat |
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:rhel_aus:8.2::appstream Versions 8.2 — ·Red Hat
- cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_tus:8.4::appstream Versions 8.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:8.6::appstream Versions 8.6 — ·Red Hat
- cpe:/a:redhat:rhel_eus:8.8::appstream Versions 8.8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.0::appstream Versions 9.0 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
Remediation
Red Hat 8 advisories
- RHSA-2024:3392 Released 2024-05-28 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) pcp-5.0.2-8.el8_2, pcp-conf-5.0.2-8.el8_2, pcp-devel-5.0.2-8.el8_2 +47
- RHSA-2024:3324 Released 2024-05-23 · Red Hat rating Importantpcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream EUS (v.8.6) pcp-5.3.5-9.el8_6, pcp-conf-5.3.5-9.el8_6, pcp-devel-5.3.5-9.el8_6 +47
- RHSA-2024:3323 Released 2024-05-23 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) pcp-5.2.5-7.el8_4, pcp-conf-5.2.5-7.el8_4, pcp-devel-5.2.5-7.el8_4 +47
- Red Hat Enterprise Linux AppStream E4S (v.8.4) pcp-5.2.5-7.el8_4, pcp-conf-5.2.5-7.el8_4, pcp-devel-5.2.5-7.el8_4 +47
- Red Hat Enterprise Linux AppStream TUS (v.8.4) pcp-5.2.5-7.el8_4, pcp-conf-5.2.5-7.el8_4, pcp-devel-5.2.5-7.el8_4 +47
Show 5 more Red Hat advisories
- RHSA-2024:3325 Released 2024-05-23 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.0) pcp-5.3.5-9.el9_0, pcp-conf-5.3.5-9.el9_0, pcp-devel-5.3.5-9.el9_0 +47
- RHSA-2024:3321 Released 2024-05-23 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) pcp-6.0.1-6.el9_2, pcp-conf-6.0.1-6.el9_2, pcp-devel-6.0.1-6.el9_2 +47
- RHSA-2024:3322 Released 2024-05-23 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream EUS (v.8.8) pcp-5.3.7-18.el8_8, pcp-conf-5.3.7-18.el8_8, pcp-devel-5.3.7-18.el8_8 +47
- RHSA-2024:3264 Released 2024-05-22 · Red Hat rating Importantpcp security update
- Red Hat Enterprise Linux AppStream (v. 8) pcp-5.3.7-20.el8_10, pcp-conf-5.3.7-20.el8_10, pcp-devel-5.3.7-20.el8_10 +47
- RHSA-2024:2566 Released 2024-04-30 · Red Hat rating Importantpcp security, bug fix, and enhancement update
- Red Hat Enterprise Linux AppStream (v. 9) pcp-6.2.0-2.el9_4, pcp-conf-6.2.0-2.el9_4, pcp-devel-6.2.0-2.el9_4 +47
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:3264 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:2566 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2024:3392 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2024:3323 |
| Red Hat Enterprise Linux AppStream E4S (v.8.4) | Fixed | RHSA-2024:3323 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2024:3324 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:3322 |
| Red Hat Enterprise Linux AppStream EUS (v.9.0) | Fixed | RHSA-2024:3325 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:3321 |
| Red Hat Enterprise Linux AppStream TUS (v.8.4) | Fixed | RHSA-2024:3323 |
Not affected: 3 products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3019
- 2026-10-03 Alias added: GHSA-g58w-wr93-q367
References
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-3019 · CVE Program
- CVE-2024-3019 · NVD
- FIRST EPSS
- GHSA-g58w-wr93-q367 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-3019 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences