Privilege Escalation Vulnerability in Cohesity Linux Agent
CVE-2021-36795

7.8HIGH

Key Information:

Vendor

Cohesity

Status
Linux Agent
Vendor
CVE Published:
6 August 2021

What is CVE-2021-36795?

A permission issue in the Cohesity Linux agent allows underprivileged Linux users to escalate their privileges, given certain environmental criteria are satisfied. This vulnerability affects versions ranging from 6.5.1b to 6.5.1d-hotfix10 and 6.6.0a to 6.6.0b-hotfix1, potentially compromising system security.

References

https://github.com/cohesity/SecAdvisory/blob/master/CVE-2...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.