CISA Known Exploited Vulnerability

CVE-2021-3560

Red Hat · Polkit

Red Hat Polkit Incorrect Authorization Vulnerability

Date added
BOD 22-01 due date
CWE CWE-863
Ransomware Unknown

CISA description

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

Required action

Apply updates per vendor instructions.