Firetruck

CVE-2021-3560

KEV

Red Hat Polkit Incorrect Authorization Vulnerability

View CVE record →
Vendor / Project
Red Hat
Product
Polkit
Date added
May 12, 2023
Due date
Jun 2, 2023
Known ransomware use
Unknown
CWEs
CWE-863

Description

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes