| Package | Affected versions | Patched versions |
|---|---|---|
| performance co-pilot | = 2.1.1= 2.1.10= 2.1.11= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.1.9= 2.2 |
The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free