Lucene search
Redhat.comRH:CVE-2021-3560HistoryJun 03, 2021 - 7:20 a.m.
CVE-2021-3560
2021-06-0307:20:59
redhat.com
access.redhat.com
221
0.012 Low
EPSS
Percentile
84.9%
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Mitigation
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.
Related
almalinux
almalinux
Important: polkit security update
2021-06-03 07:54:47
osv
osv
CVE-2021-3560
2022-02-16 19:15:08
policykit-1 vulnerability
2021-06-03 10:51:20
Important: polkit security update
2021-06-03 07:54:47
packetstorm
packetstorm
Polkit D-Bus Authentication Bypass
2021-07-09 00:00:00
Polkit 0.105-26 0.117-2 Privilege Escalation
2021-06-15 00:00:00
f5
f5
K41410307 : polkit vulnerability CVE-2021-3560
2021-07-14 00:00:00
nessus
nessus
RHEL 8 : polkit (RHSA-2021:2237)
2021-06-03 00:00:00
Photon OS 3.0: Polkit PHSA-2021-3.0-0248
2021-06-04 00:00:00
EulerOS Virtualization 2.9.1 : polkit (EulerOS-SA-2021-2738)
2021-11-17 00:00:00
githubexploit
githubexploit
Exploit for Incorrect Authorization in Polkit Project Polkit
2021-06-29 20:47:16
Exploit for Improper Check for Unusual or Exceptional Conditions in Polkit Project Polkit
2021-07-28 06:05:46
Exploit for CVE-2021-3560
2021-07-26 07:08:36
openvas
openvas
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2561)
2021-09-28 00:00:00
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2311)
2021-08-09 00:00:00
Ubuntu: Security Advisory (USN-4980-1)
2021-06-04 00:00:00
ubuntu
ubuntu
polkit vulnerability
2021-06-03 00:00:00
gentoo
gentoo
polkit: Privilege escalation
2021-07-13 00:00:00
cvelist
cvelist
CVE-2021-3560
2022-02-16 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: polkit-0.117-3.fc34.1
2021-06-07 01:16:40
[SECURITY] Fedora 33 Update: polkit-0.117-2.fc33.1
2021-06-19 01:14:12
cve
cve
CVE-2021-3560
2022-02-16 19:15:00
altlinux
altlinux
Security fix for the ALT Linux 9 package polkit version 0.116-alt2.M90P.2
2021-06-15 00:00:00
suse
suse
Security update for polkit (important)
2021-07-11 00:00:00
Security update for polkit (important)
2021-06-04 00:00:00
cisa_kev
cisa_kev
Red Hat Polkit Incorrect Authorization Vulnerability
2023-05-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-3560 affecting package polkit 0.116-7
2022-02-01 04:53:56
redhat
redhat
(RHSA-2021:2236) Important: polkit security update
2021-06-03 07:54:08
(RHSA-2021:2238) Important: polkit security update
2021-06-03 07:54:47
(RHSA-2021:2237) Important: polkit security update
2021-06-03 07:54:25
redos
redos
ROS-20211223-06
2021-12-23 00:00:00
photon
photon
attackerkb
attackerkb
CVE-2021-3560
2022-02-16 00:00:00
thn
thn
7-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
2021-06-11 07:47:00
12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
2022-01-26 05:39:00
veracode
veracode
Denial Of Service (DoS)
2021-06-04 22:46:32
rocky
rocky
polkit security update
2021-06-03 07:54:47
archlinux
archlinux
[ASA-202106-24] polkit: privilege escalation
2021-06-09 00:00:00
freebsd
freebsd
debiancve
debiancve
CVE-2021-3560
2022-02-16 19:15:00
alpinelinux
alpinelinux
CVE-2021-3560
2022-02-16 19:15:00
mageia
mageia
Updated polkit packages fix a security vulnerability
2021-06-09 00:45:12
zdt
zdt
Polkit D-Bus Authentication Bypass Exploit
2021-07-10 00:00:00
Polkit 0.105-26 0.117-2 - Local Privilege Escalation Exploit
2021-06-15 00:00:00
slackware
slackware
[slackware-security] polkit
2021-06-07 19:07:33
prion
prion
Design/Logic Flaw
2022-02-16 19:15:00
ubuntucve
ubuntucve
CVE-2021-3560
2021-06-03 00:00:00
oraclelinux
oraclelinux
polkit security update
2021-06-04 00:00:00
exploitdb
exploitdb
Polkit 0.105-26 0.117-2 - Local Privilege Escalation
2021-06-15 00:00:00
seebug
seebug
Linux Polkit权限提升漏洞（CVE-2021-3560）
2021-06-15 00:00:00
github
github
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-07-16 19:47:06
trellix
trellix
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
The Bug Report - January 2022 Edition
2022-02-02 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00