A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:3264 advisory.

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3264 advisory.

    [5.3.7-20.0.1]
    - pcp-zoneinfo fix to replay ol7 archives [Orabug: 35903733]
    - Backporting of python tool pcp-meminfo  [Orabug: 35759707]
    - Backporting of python tool pcp-slabinfo [Orabug: 35560940]
    - Backporting of python tool pcp-buddyinfo [Orabug: 35660932]
    - Backporting of python tool pcp-netstat [Orabug: 34324779]
    - Backporting of python tool pcp-zoneinfo [Orabug: 35660927]
    - Fixed multiple pcp python utiltites issues[Orabug: 35434363]
    - Fixed broken pipe issue in pcp ps utlity[Orabug: 34830203]
    - Fixed pcp mpstat utiltiy crash issue [Orabug: 34891338]
    - Pcp mpstat utiltiy initial archive file read error fix [Orabug: 34869451]
    - Fix pcp-ps to show n sample with archives[Orabug: 34849959]
    - Pcp ps Utility -o option and print issue fix [Orabug: 34321683]
    - Pcp ps utilty has been added [Orabug: 34321683]

    [5.3.7-20]
    - Disable RESP proxying by default in pmproxy (RHEL-30715)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3392 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3322 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3324 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3321 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3325 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3323 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3264 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:3264 advisory.

  - A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local     network, allowing remote command execution with the privileges of the Redis user. This issue can only be     exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually.
    The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This     flaw affects PCP versions 4.3.4 and newer. (CVE-2024-3019)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2566 advisory.

  - A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local     network, allowing remote command execution with the privileges of the Redis user. This issue can only be     exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually.
    The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This     flaw affects PCP versions 4.3.4 and newer. (CVE-2024-3019)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2566 advisory.

    Performance Co-Pilot (PCP) is a suite of tools, services, and libraries for acquisition, archiving, and     analysis of system-level performance measurements. Its light-weight distributed architecture makes it     particularly well-suited to centralized analysis of complex systems.

    Security Fix(es):

    * pcp: exposure of the redis server backend allows remote command execution via pmproxy (CVE-2024-3019)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References     section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
200605	Rocky Linux 8 : pcp (RLSA-2024:3264)	Nessus	Rocky Linux Local Security Checks	high
198076	Oracle Linux 8 : pcp (ELSA-2024-3264)	Nessus	Oracle Linux Local Security Checks	high
197980	RHEL 8 : pcp (RHSA-2024:3392)	Nessus	Red Hat Local Security Checks	high
197816	RHEL 8 : pcp (RHSA-2024:3322)	Nessus	Red Hat Local Security Checks	high
197815	RHEL 8 : pcp (RHSA-2024:3324)	Nessus	Red Hat Local Security Checks	high
197814	RHEL 9 : pcp (RHSA-2024:3321)	Nessus	Red Hat Local Security Checks	high
197811	RHEL 9 : pcp (RHSA-2024:3325)	Nessus	Red Hat Local Security Checks	high
197810	RHEL 8 : pcp (RHSA-2024:3323)	Nessus	Red Hat Local Security Checks	high
197789	RHEL 8 : pcp (RHSA-2024:3264)	Nessus	Red Hat Local Security Checks	high
197664	CentOS 8 : pcp (CESA-2024:3264)	Nessus	CentOS Local Security Checks	high
195198	Oracle Linux 9 : pcp (ELSA-2024-2566)	Nessus	Oracle Linux Local Security Checks	high
194838	RHEL 9 : pcp (RHSA-2024:2566)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2024-3019

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high