VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 24, 2014· Updated Jun 17, 2026

CVE-2014-7298

CVE-2014-7298

Description

adsetgroups in Centrify Server Suite 2008 through 2014.1 and Centrify DirectControl 3.x through 4.2.0 on Linux and UNIX allows local users to read arbitrary files with root privileges by leveraging improperly protected setuid functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Centrify/Centrify Suite5 versions
    cpe:2.3:a:centrify:centrify_suite:2008:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:centrify:centrify_suite:2008:*:*:*:*:*:*:*
    • cpe:2.3:a:centrify:centrify_suite:2012:*:*:*:*:*:*:*
    • cpe:2.3:a:centrify:centrify_suite:2012.5:*:*:*:*:*:*:*
    • cpe:2.3:a:centrify:centrify_suite:2014.1:*:*:*:*:*:*:*
    • (no CPE)range: 2008 through 2014.1
  • Centrify/Directcontrol3 versions
    cpe:2.3:a:centrify:directcontrol:3.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:centrify:directcontrol:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:centrify:directcontrol:4.2.0:*:*:*:*:*:*:*
    • (no CPE)range: 3.x through 4.2.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.