Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcp | Jul 30, 2024 | Aug 27, 2012 |
| Suse | — | Upgrade pcp-pmda-smartUpgrade pcp-pmda-pdnsUpgrade pcp-guiUpgrade pcp-pmda-newsUpgrade pcp-pmda-nvidia-gpuUpgrade pcp-webapiUpgrade pcpUpgrade pcp-pmda-mailqUpgrade pcp-pmda-bashUpgrade pcp-import-iostat2pcpUpgrade permissionsUpgrade pcp-pmda-bind2Upgrade pcp-export-pcp2zabbixUpgrade pcp-pmda-rabbitmqUpgrade pcp-pmda-gpsdUpgrade pcp-pmda-mysqlUpgrade pcp-pmda-redisUpgrade pcp-pmda-haclusterUpgrade python-pcpUpgrade libpcp_web1Upgrade pcp-pmda-snmpUpgrade libpcp_mmv1Upgrade pcp-pmda-elasticsearchUpgrade pcp-pmda-ds389Upgrade pcp-pmda-jsonUpgrade pcp-export-pcp2graphiteUpgrade pcp-pmda-openmetricsUpgrade pcp-pmda-haproxyUpgrade pcp-pmda-lmsensorsUpgrade pcp-export-pcp2elasticsearchUpgrade pcp-pmda-zswapUpgrade pcp-pmda-rsyslogUpgrade perl-PCP-LogImportUpgrade pcp-develUpgrade pcp-pmda-summaryUpgrade pcp-pmda-postfixUpgrade pcp-pmda-traceUpgrade pcp-pmda-zimbraUpgrade perl-PCP-PMDAUpgrade pcp-pmda-glusterUpgrade pcp-pmda-weblogUpgrade pcp-pmda-bondingUpgrade pcp-pmda-lioUpgrade libpcp3Upgrade pcp-pmda-activemqUpgrade libpcp-develUpgrade pcp-pmda-roomtempUpgrade pcp-pmda-nutcrackerUpgrade pcp-pmda-ciscoUpgrade pcp-pmda-dmUpgrade pcp-pmda-namedUpgrade libpcp_import1Upgrade pcp-pmda-resctrlUpgrade pcp-selinuxUpgrade pcp-pmda-netcheckUpgrade libpcp_gui2Upgrade pcp-pmda-oracleUpgrade pcp-pmda-amdgpuUpgrade pcp-pmda-gpfsUpgrade pcp-pmda-libvirtUpgrade pcp-import-collectl2pcpUpgrade pcp-pmda-systemdUpgrade pcp-export-pcp2jsonUpgrade pcp-zeroconfUpgrade pcp-pmda-lustreUpgrade pcp-pmda-perfeventUpgrade pcp-pmda-vmwareUpgrade pcp-export-pcp2xmlUpgrade pcp-export-pcp2influxdbUpgrade perl-PCP-MMVUpgrade pcp-export-zabbix-agentUpgrade pcp-pmda-gfs2Upgrade pcp-pmda-memcacheUpgrade pcp-pmda-apacheUpgrade pcp-pmda-dbpingUpgrade pcp-pmda-slurmUpgrade pcp-pmda-openvswitchUpgrade pcp-pmda-nginxUpgrade pcp-pmda-unboundUpgrade pcp-pmda-infinibandUpgrade pcp-pmda-nfsclientUpgrade pcp-pmda-micUpgrade pcp-pmda-uwsgiUpgrade pcp-pmda-rpmUpgrade pcp-pmda-shpingUpgrade pcp-pmda-mountsUpgrade pcp-pmda-socketsUpgrade pcp-pmda-netfilterUpgrade pcp-import-sheet2pcpUpgrade pcp-pmda-sambaUpgrade pcp-import-mrtg2pcpUpgrade pcp-pmda-lustrecommUpgrade pcp-pmda-ds389logUpgrade libpcp_trace2Upgrade pcp-system-toolsUpgrade pcp-docUpgrade pcp-import-sar2pcpUpgrade pcp-pmda-kvmUpgrade perl-PCP-LogSummaryUpgrade pcp-pmda-loggerUpgrade pcp-pmda-cifsUpgrade pcp-pmda-dockerUpgrade python3-pcpUpgrade pcp-managerUpgrade pcp-confUpgrade pcp-import-ganglia2pcpUpgrade pcp-pmda-sendmailUpgrade pcp-export-pcp2spark | Feb 17, 2015 | Jun 28, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub