CVE-2021-3560

🗓️ 16 Feb 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1162 Views🌐 WEB

Polkit vulnerability allowing local attackers to elevate privileges and bypass credential checks, leading to potential creation of new local administrator

Reporter	Title	Published	Views	Family All 165
GithubExploit	lpe-toolkit	21 May 202619:33	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	10 Jul 202306:38	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	29 Apr 202218:57	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jul 202309:29	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	17 Apr 202615:59	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	8 Nov 202305:11	–	githubexploit
GithubExploit	Exploit for Improper Check for Unusual or Exceptional Conditions in Polkit_Project Polkit	17 Dec 202515:21	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	30 Apr 202205:53	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	11 Jun 202114:28	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Polkit_Project Polkit	27 May 202600:42	–	githubexploit

NVD

Vulners

Node

polkit_project polkitRange<0.119

Node

debian debian_linuxMatch11.0

Node

canonical ubuntu_linuxMatch20.04

Node

redhat virtualizationMatch4.0

redhat virtualization_hostMatch4.0

AND

redhat enterprise_linuxMatch8.0

Node

redhat openshift_container_platformMatch4.7

AND

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

[
  {
    "vendor": "n/a",
    "product": "polkit",
    "versions": [
      {
        "version": "polkit 0.119",
        "status": "affected"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html
github	www.github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
packetstormsecurity	www.packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
org.freedesktop.Accounts.FindUserByName	path	/org/freedesktop/Accounts	Polkit via dbus-send to locate or create the Accounts object for user manipulation.	CWE-863, CWE-754
root	path	/org/freedesktop/Accounts	Polkit via dbus-send to locate or create the Accounts object for user manipulation.	CWE-863, CWE-754
org.freedesktop.DBus.Properties.Get	path	/org/freedesktop/Accounts/User0	Read the RealName property to verify or manipulate RealName as part of privilege escalation.	CWE-863, CWE-754
org.freedesktop.Accounts.User	path	/org/freedesktop/Accounts/User0	Read the RealName property to verify or manipulate RealName as part of privilege escalation.	CWE-863, CWE-754
RealName	path	/org/freedesktop/Accounts/User0	Read the RealName property to verify or manipulate RealName as part of privilege escalation.	CWE-863, CWE-754
org.freedesktop.Accounts.CreateUser	nested	/org/freedesktop/Accounts	Create a new user via Accounts.CreateUser to establish a foothold for privilege escalation.	CWE-863, CWE-754
string:USERNAME	nested	/org/freedesktop/Accounts	Create a new user via Accounts.CreateUser to establish a foothold for privilege escalation.	CWE-863, CWE-754
string:"USERNAME"	nested	/org/freedesktop/Accounts	Create a new user via Accounts.CreateUser to establish a foothold for privilege escalation.	CWE-863, CWE-754
int32:1	nested	/org/freedesktop/Accounts	Create a new user via Accounts.CreateUser to establish a foothold for privilege escalation.	CWE-863, CWE-754
org.freedesktop.Accounts.User.SetPassword	path	/org/freedesktop/Accounts/User{uid}	Set password for the newly created user to enable login as that user.	CWE-863, CWE-754

17 Jun 2026 04:05Current

6.1Medium risk

Vulners AI Score6.1

CVSS 27.2

CVSS 3.17.8

EPSS0.22193

SSVC

polkit cve-2021-3560 vulnerability local attacker privilege escalation bypass credential checks data integrity system availability