description: CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.
problem types: CWE-214 Invocation of Process Using Visible Sensitive Information
affected:
{
defaultStatus: unknown
product: cagefs
vendor: Cloudlinux OS
versions:
status: affected, version: 7.1.1-1
status: unaffected, version: 7.1.2-2
}