Red Hat Cluster Project 2.x allows local users to modify or overwrite arbitrary files via symlink attacks on files in /tmp, involving unspecified components in Resource Group Manager (aka rgmanager) before 2.03.09-1, gfs2-utils before 2.03.09-1, and CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rgmanagerUpgrade cmanUpgrade cman-develUpgrade gfs2-utils | Dec 1, 2016 | Mar 30, 2009 |
| Oracle_linux | — | Upgrade gfs2-utilsUpgrade cmanUpgrade cman-devel | Oct 16, 2024 | Mar 30, 2009 |
| Ubuntu | — | Upgrade rgmanagerUpgrade libcman1Upgrade ccsUpgrade cmanUpgrade fenceUpgrade gfs2-tools | Nov 8, 2024 | Mar 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub