It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Metrics
Affected Vendors & Products
References
History
Wed, 14 Aug 2024 00:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2022-02-16T00:00:00
Updated: 2024-08-03T17:01:06.571Z
Reserved: 2021-05-20T00:00:00
Link: CVE-2021-3560
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-02-16T19:15:08.450
Modified: 2024-11-21T06:21:50.987
Link: CVE-2021-3560
Redhat