Vulnerability Details : CVE-2023-6917
A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.
Vulnerability category: Gain privilege
Products affected by CVE-2023-6917
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2023-6917
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 14 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-6917
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.0
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N |
0.8
|
5.2
|
Red Hat, Inc. | 2024-02-28 |
CWE ids for CVE-2023-6917
-
Opening temporary files without appropriate measures or controls can leave the file, its contents and any function that it impacts vulnerable to attack.Assigned by: secalert@redhat.com (Primary)
References for CVE-2023-6917
-
https://bugzilla.redhat.com/show_bug.cgi?id=2254983
2254983 – (CVE-2023-6917) CVE-2023-6917 pcp: unsafe use of directories allows pcp to root privilege escalation
-
https://access.redhat.com/security/cve/CVE-2023-6917
CVE-2023-6917- Red Hat Customer Portal
-
https://access.redhat.com/errata/RHSA-2024:2213
RHSA-2024:2213 - Security Advisory - Red Hat Customer Portal
Jump to