Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-pmda-socketsUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-netcheckUpgrade pcp-pmda-libvirtUpgrade pcp-pmda-dmUpgrade libpcp_gui2Upgrade pcp-pmda-apacheUpgrade pcp-pmda-shpingUpgrade pcp-docUpgrade pcp-pmda-unboundUpgrade python3-pcpUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-rpmUpgrade pcp-pmda-memcacheUpgrade libpcp3Upgrade pcp-import-sar2pcpUpgrade pcp-pmda-oracleUpgrade pcp-pmda-dockerUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-sendmailUpgrade pcp-pmda-openvswitchUpgrade pcp-export-pcp2xmlUpgrade pcp-pmda-dbpingUpgrade pcp-managerUpgrade pcp-pmda-nginxUpgrade pcp-export-pcp2influxdbUpgrade pcp-import-sheet2pcpUpgrade perl-PCP-MMVUpgrade pcp-pmda-netfilterUpgrade pcp-pmda-cifsUpgrade pcp-pmda-uwsgiUpgrade pcp-confUpgrade pcp-pmda-loggerUpgrade pcp-pmda-namedUpgrade pcp-pmda-gpfsUpgrade pcp-import-mrtg2pcpUpgrade libpcp-develUpgrade pcp-pmda-lustrecommUpgrade pcp-system-toolsUpgrade libpcp_trace2Upgrade pcp-pmda-ds389logUpgrade pcp-pmda-roomtempUpgrade libpcp_import1Upgrade pcp-pmda-resctrlUpgrade pcp-export-pcp2sparkUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-sambaUpgrade pcp-pmda-lustreUpgrade pcp-pmda-activemqUpgrade pcp-pmda-mountsUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-systemdUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-nfsclientUpgrade pcp-import-ganglia2pcpUpgrade pcp-zeroconfUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-amdgpuUpgrade pcp-selinuxUpgrade pcp-pmda-lioUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-vmwareUpgrade pcp-pmda-micUpgrade pcp-export-pcp2jsonUpgrade pcp-pmda-kvmUpgrade pcp-pmda-slurmUpgrade pcp-pmda-gpsdUpgrade pcp-export-pcp2graphiteUpgrade pcp-import-iostat2pcpUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-newsUpgrade pcp-export-pcp2elasticsearchUpgrade permissionsUpgrade pcp-pmda-elasticsearchUpgrade perl-PCP-PMDAUpgrade pcp-pmda-zswapUpgrade pcp-pmda-weblogUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-jsonUpgrade pcp-pmda-postfixUpgrade pcp-guiUpgrade pcp-webapiUpgrade pcp-pmda-summaryUpgrade pcp-pmda-rsyslogUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-pmda-lmsensorsUpgrade pcp-develUpgrade libpcp_mmv1Upgrade pcp-pmda-haproxyUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-glusterUpgrade pcp-pmda-mailqUpgrade pcp-export-pcp2zabbixUpgrade python-pcpUpgrade pcp-pmda-haclusterUpgrade pcp-pmda-bind2Upgrade pcp-pmda-zimbraUpgrade pcpUpgrade pcp-pmda-pdnsUpgrade pcp-pmda-traceUpgrade pcp-pmda-smartUpgrade pcp-pmda-bondingUpgrade pcp-pmda-ds389Upgrade pcp-pmda-bashUpgrade pcp-pmda-snmpUpgrade perl-PCP-LogImportUpgrade libpcp_web1Upgrade pcp-pmda-redis | Feb 17, 2015 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub