Vulnerability in Centrify Suite

CVE-2014-7298

adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.

EPSS: 0.004 (30.0th percentile) — read the EPSS interpretation.

Affected products

Centrify Centrify_suite — versions 2008, 2012, 2012.5
Centrify Directcontrol — versions 3.0, 4.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM)