CVE-2024-3019
Pcp: exposure of the redis server backend allows remote command execution via pmproxy
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
| CWE | CWE-668 |
| Published | Mar 28, 2024 |
| Last Updated | Nov 20, 2025 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2024:2566 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3264 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3321 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3322 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3323 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3324 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3325 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:3392 access.redhat.com: https://access.redhat.com/security/cve/CVE-2024-3019 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2271898
Credits
Red Hat would like to thank Jihwan Yoon (NAVER Cloud Security Analysis) for reporting this issue.