5.3
Moyenne
CVE-2022-21946 A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of…
Description
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Factory 1.2 | premières → 1.2-1.3 | Pas de correctif indiqué |
Références
- bugzilla.suse.com bugzilla.suse.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Factory
Les 24 CVE de Factory →
CVE-2022-31253
A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap…
7.1
Élevée
CVE-2022-21945
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen…
5.1
Moyenne
CVE-2022-21944
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports…
7.8
Élevée
CVE-2021-36781
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to…
5.9
Moyenne