CVE Vulnerabilities

CVE-2012-1615

Improper Privilege Management

Published: Dec 06, 2019 | Modified: Dec 16, 2019
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Sectool Fedoraproject - (including) - (including)
Fedora Fedoraproject 16 (including) 16 (including)
Fedora Fedoraproject 17 (including) 17 (including)

Potential Mitigations

References