CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply updates per vendor instructions.

Beschrijving (NVD, Engels)

Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij Red Hat

• CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
• CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability
• CVE-2018-14667: Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
• CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
• CVE-2010-1428: Red Hat JBoss Information Disclosure Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.