CVE-2020-36771

CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user.

• CWE-214
• CWE-200

• http://packetstormsecurity.com/files/176790/CloudLinux-CageFS-7.1.1-1-Token-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2024/Jan/24Exploit, Mailing List, Third Party Advisory
• https://blog.cloudlinux.com/cagefs-lve-wrappers-and-bsock-have-been-rolled-out-to-100Release Notes
• https://github.com/sbaresearch/advisories/tree/public/2020/SBA-ADV-20200707-01_CloudLinux_CageFS_Token_Disclosure
• http://packetstormsecurity.com/files/176790/CloudLinux-CageFS-7.1.1-1-Token-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2024/Jan/24Exploit, Mailing List, Third Party Advisory
• https://blog.cloudlinux.com/cagefs-lve-wrappers-and-bsock-have-been-rolled-out-to-100Release Notes
• https://github.com/sbaresearch/advisories/tree/public/2020/SBA-ADV-20200707-01_CloudLinux_CageFS_Token_Disclosure

Published

Jan 22, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36765Insufficient policy enforcement in Navigation in Google Chro…6.5
• CVE-2020-36766An issue was discovered in the Linux kernel before 5.8.6. dr…3.3
• CVE-2020-36767tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows …7.5
• CVE-2020-36768A vulnerability was found in rl-institut NESP2 Initial Relea…9.8
• CVE-2020-36769The Widget Settings Importer/Exporter Plugin for WordPress …5.4
• CVE-2020-36770pkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 …9.8
• CVE-2020-36772CloudLinux CageFS 7.0.8-2 or below insufficiently restricts …4.4
• CVE-2020-36773Artifex Ghostscript before 9.53.0 has an out-of-bounds write…9.8
• CVE-2020-36774plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 an…5.5
• CVE-2020-36775In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2020-36776In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2020-36777In the Linux kernel, the following vulnerability has been re…5.5