CVE-2020-36772CWE-73

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command

Medium · published January 22, 2024

CVSS v3.1
4.4
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside the CageFS environment.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.5th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2024-01-22T14:11Z
EPSS history
Timeline
  • 22 JAN 14:11Z
    CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command
    cvelistv5