CVE ID:	CVE-2024-3019
Description:	A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowing remote command execution with the privileges of the Redis user. This issue can only be exploited when pmproxy is running. By default, pmproxy is not running and needs to be started manually. The pmproxy service is usually started from the 'Metrics settings' page of the Cockpit web interface. This flaw affects PCP versions 4.3.4 and newer.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-3019 RHBZ#2271898 https://bugzilla.redhat.com/show_bug.cgi?id=2271898 RHSA-2024:2566 https://access.redhat.com/errata/RHSA-2024:2566 RHSA-2024:3264 https://access.redhat.com/errata/RHSA-2024:3264 RHSA-2024:3321 https://access.redhat.com/errata/RHSA-2024:3321 RHSA-2024:3322 https://access.redhat.com/errata/RHSA-2024:3322 RHSA-2024:3323 https://access.redhat.com/errata/RHSA-2024:3323 RHSA-2024:3324 https://access.redhat.com/errata/RHSA-2024:3324 RHSA-2024:3325 https://access.redhat.com/errata/RHSA-2024:3325 RHSA-2024:3392 https://access.redhat.com/errata/RHSA-2024:3392 https://access.redhat.com/security/cve/CVE-2024-3019 https://access.redhat.com/security/cve/CVE-2024-3019