Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rgmanagerUpgrade cman-develUpgrade cmanUpgrade gfs2-utils | Dec 1, 2016 | Mar 30, 2009 |
| Oracle_linux | — | Upgrade gfs2-utilsUpgrade cman-develUpgrade cman | Oct 16, 2024 | Mar 30, 2009 |
| Ubuntu | — | Upgrade gfs2-toolsUpgrade ccsUpgrade cmanUpgrade fenceUpgrade rgmanagerUpgrade libcman1 | Nov 8, 2024 | Mar 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub