CVE-2014-4867

Name of the Vulnerable Software and Affected Versions Cryoserver Security Appliance version 7.3.x

Description The issue concerns weak permissions for the /etc/init.d/cryoserver file, allowing local users to escalate privileges. This can be achieved by accessing the support account and executing the /bin/cryo-mgmt program.

Recommendations For Cryoserver Security Appliance version 7.3.x, consider restricting access to the /etc/init.d/cryoserver file and the /bin/cryo-mgmt program to prevent privilege escalation. Additionally, review and secure the support account to minimize the risk of exploitation.