CVE-2021-3978

Summary

CVE-2021-3978 is a vulnerability affecting the octorpki component of the Cloudflare Certificate Authority (CFRPki) software. When using rsync with the "-a" flag, octorpki copies binaries with the suid bit (set-user-id) as root. Since the default service definition for octorpki runs as root, this vulnerability could be exploited in conjunction with another issue, such as a TAL file processing flaw, to escalate local privileges. This weakness in octorpki's file handling could potentially compromise the security of the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.