CVE-2024-45770
Pcp: pmpost symlink attack allows escalating pcp to root user
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges.
| CWE | CWE-59 |
| Published | Sep 19, 2024 |
| Last Updated | Nov 20, 2025 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new medium vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6837 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6840 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6842 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6843 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6844 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6846 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6847 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:6848 access.redhat.com: https://access.redhat.com/errata/RHSA-2024:9452 access.redhat.com: https://access.redhat.com/security/cve/CVE-2024-45770 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2310451