1 matches found
CVE-2022-23220: Missing Authentication for Critical Function
USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...
7.8CVSS6.6AI score0.00516EPSS
SaveExploits1References2
20