Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•5 views

CVE-2022-23220: Missing Authentication for Critical Function

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

7.8CVSS6.6AI score0.00516EPSS
SaveExploits1References2
Rows per page
Query Builder