CVE-2021-3560

🗓️ 16 Feb 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1312 Views🌐 WEB

Polkit vulnerability allowing local attackers to elevate privileges and bypass credential checks, leading to potential creation of new local administrator

Reporter	Title	Published	Views	Family All 203
GithubExploit	lpe-toolkit	21 May 202619:33	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	10 Jul 202306:38	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	29 Apr 202218:57	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jul 202309:29	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	17 Apr 202615:59	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	8 Nov 202305:11	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Polkit_Project Polkit	17 Dec 202515:21	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	30 Apr 202205:53	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	11 Jun 202114:28	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	27 May 202600:42	–	githubexploit

NVD

Vulners

Node

polkit_project polkitRange<0.119

Node

debian debian_linuxMatch11.0

Node

canonical ubuntu_linuxMatch20.04

Node

AND

redhat virtualizationMatch4.0

redhat virtualization_hostMatch4.0

redhat enterprise_linuxMatch8.0

Node

AND

redhat openshift_container_platformMatch4.7

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

[
  {
    "vendor": "n/a",
    "product": "polkit",
    "versions": [
      {
        "version": "polkit 0.119",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
packetstormsecurity	www.packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
root	path	/org/freedesktop/Accounts	FindUserByName called on the Accounts object to locate a target user (e.g., root).	CWE-754, CWE-863
string:'<new_realname>'	path	/org/freedesktop/Accounts/User0	SetRealName to change the root user's RealName as part of privilege escalation.	CWE-754, CWE-863
string:org.freedesktop.Accounts.User	path	/org/freedesktop/Accounts/User0	Get the RealName property to verify or recover the original value.	CWE-754, CWE-863
string:RealName	path	/org/freedesktop/Accounts/User0	Get the RealName property to verify or recover the original value.	CWE-754, CWE-863
string:USERNAME	path	/org/freedesktop/Accounts	CreateUser to add a new account with privilege escalation potential.	CWE-754, CWE-863
string:"USERNAME"	path	/org/freedesktop/Accounts	CreateUser to add a new account with privilege escalation potential.	CWE-754, CWE-863
int32:1	path	/org/freedesktop/Accounts	CreateUser to add a new account with privilege escalation potential.	CWE-754, CWE-863
string:'<hashed_password>'	path	/org/freedesktop/Accounts/User{uid}	SetPassword for the newly created user using a hashed password.	CWE-754, CWE-863
string: &	path	/org/freedesktop/Accounts/User{uid}	SetPassword for the newly created user using a hashed password.	CWE-754, CWE-863
int64:<uid>	path	/org/freedesktop/Accounts	DeleteUser to clean up the created account after exploitation.	CWE-754, CWE-863

17 Jun 2026 04:05Current

7.5High risk

Vulners AI Score7.5

CVSS 27.2

CVSS 3.17.8

EPSS0.23708

SSVC

polkit cve-2021-3560 vulnerability local attacker privilege escalation bypass credential checks data integrity system availability