CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cagefs | Cloudlinux | * | 7.1.2-2 (excluding) |