1637 matches found
CVE-2022-23220
USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...
Debian DSA-5052-1 : usbview - security update
The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5052 advisory. - USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for...
CVE-2022-23220
USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...
UBUNTU-CVE-2022-23220
USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...
CVE-2022-23220
USBView (firmware: Ubuntu/Debian/Gentoo package usbview) is affected by CVE-2022-23220. The root cause is insecure Polkit configuration (example: allow_any=yes for pkexec) that disables authentication, allowing local users (including those via SSH) to execute code as root. Affected version: USBVi...
CVE-2022-23220
USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...
ROS-20211223-06
A vulnerability in the polkitsystembusnamegetcredssync function of the dbus-daemon of the Polkit library is related to with access control flaws. Exploitation of the vulnerability could allow an attacker to escalate their privileges...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2738)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2765)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.9.0 : polkit (EulerOS-SA-2021-2765)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of th...
EulerOS Virtualization 2.9.1 : polkit (EulerOS-SA-2021-2738)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of th...
polkit bug fix and enhancement update
An update is available for polkit. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...
polkit bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
The vulnerability of the polkit service allows a hacker to create a user account and elevate its privileges to administrator level.
The vulnerability of polkit is related to access control deficiencies. Exploiting this vulnerability allows an attacker to create a user account and elevate its privileges to administrator level using specially crafted requests...
systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"
It was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possible for an attacker, in some particular configurations, to set a XDGSEAT environment variable which allows for commands to be checked against polkit policies using the...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2561)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2021-2537)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : polkit (EulerOS-SA-2021-2537)
According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to...
EulerOS 2.0 SP9 : polkit (EulerOS-SA-2021-2561)
According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to...
EulerOS 2.0 SP8 : polkit (EulerOS-SA-2021-2311)
According to the version of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - polkit is a toolkit for defining and handling authorizations. It isused for allowing unprivileged processes to speak to...