CVE-2024-6126 - CERT CVE
ID CVE-2024-6126
Sažetak A flaw was found in the cockpit package. This flaw allows an authenticated user to kill any process when enabling the pam_env's user_readenv option, which leads to a denial of service (DoS) attack.
Reference
CVSS
Base: 3.2
Impact: 1.4
Exploitability:1.5
Pristup
VektorSloženostAutentikacija
LOCAL LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
NONE NONE LOW
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:L
Zadnje važnije ažuriranje 07-11-2026 - 12:17
Objavljeno 03-07-2024 - 15:15