Cloudlinux OS

Products

ProductCVEsExploitedLatest
cagefs2–Jan 22, 2024

Exploited and recent CVEs

  • CVE-2020-36772 Medium 4.4 CloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail proxy command. This allows local users to read and write arbitrary files of certain file formats outside 0.4%
  • CVE-2020-36771 High 7.8 CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and 0.5%