CVE-2021-3560

Red Hat Polkit Incorrect Authorization Vulnerability

Red Hat — Polkit

Added to KEV catalog: 12 May 2023
Federal remediation due date: 2 June 2023
Weakness classification (CWE): CWE-863

CISA Description

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=1961710; https://nvd.nist.gov/vuln/detail/CVE-2021-3560

View on NVD View on MITRE CVE View full CISA catalog

More Red Hat Vulnerabilities

CVE-2015-5287

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

CVE-2015-3246

Red Hat Libuser Race Condition Vulnerability

CVE-2018-14667

Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

CVE-2021-4034

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

CVE-2010-1428

Red Hat JBoss Information Disclosure Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services