Skip to content
Sign in Sign up
JA EN FR
SecPulse
Medium 4.4

Pcp: pmpost symlink attack allows escalating pcp to root user

CVE-2024-45770 First seen on SecPulse

Summary

A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.

Fix status by distribution

Records published by each distribution for this CVE. Fixed versions differ by release; check each link.

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details