David Lisa Gnedt

The issue allows local users to view the authentication token via the process list and gain code execution as another user, because the authentication token is passed as a command line argument. This can occur in certain configurations.

The issue allows local users to read and write arbitrary files of certain file formats outside the CageFS environment due to insufficient restrictions on file paths supplied to the sendmail proxy command.

An issue in the session management component of the administrative web interface allows a remote attacker to escalate privileges.