CVE-2024-45770 — Pcp: pmpost symlink attack allows escalating pcp to root user
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to t…
Published: 2024-09-19 · CVSS: 4.4 · CVSS 3.1
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7