CVE-2023-6917

Name of the Vulnerable Software and Affected Versions Performance Co-Pilot (PCP) (affected versions not specified)

Description A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. The vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.