Skip to content
fr Sign in
5.3 Medium

CVE-2022-21946 A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of…

Description

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

Affected products and versions

Product Affected versions Fixed in
Factory 1.2 earliest → 1.2-1.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Factory

The 24 CVEs of Factory →
CVE-2022-31253 A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap… 7.1 High CVE-2022-21945 A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen… 5.1 Medium CVE-2022-21944 A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports… 7.8 High CVE-2021-36781 A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to… 5.9 Medium
Track this CVE