VULNERABILITY INTELLIGENCE

CVE-2014-4867

CVSS score6.8 MEDIUM

EPSS probability0.32%

CISA KEVNot currently listed

Published2014-10-10

Last modified2026-06-17

CVSS vectorAV:L/AC:L/Au:S/C:C/I:C/A:C

Description

Cryoserver Security Appliance 7.3.x uses weak permissions for /etc/init.d/cryoserver, which allows local users to gain privileges by leveraging access to the support account and running the /bin/cryo-mgmt program.

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource