2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:polkit_project:polkit:0.115:*:*:*:*:*:*:*","matchCriteriaId":"94D3160D-6DB5-46D3-8A98-010D2095587A","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*","matchCriteriaId":"16E6D998-B41D-4B49-9E00-8336D2E40A4A","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","matchCriteriaId":"8D305F7A-D159-4716-AB26-5E38BB5CD991","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","matchCriteriaId":"07C312A0-CD2C-4B9C-B064-6409B25C278F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In PolicyKit (aka polkit) 0.115, the \"start time\" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c."},{"lang":"es","value":"En PolicyKit (también conocido como polkit) 0.115, el mecanismo de protección \"start time\" puede omitirse debido a que fork() no es atómico y, por lo tanto, las decisiones de autorización se cachean incorrectamente. Esto está relacionado con la falta de comprobación de uid en polkitbackend/polkitbackendinteractiveauthority.c."}],"id":"CVE-2019-6133","lastModified":"2026-06-17T02:38:39.693","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.4,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-01-11T14:29:00.390","references":[{"source":"cve@mitre.org","url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00049.html"},{"source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106537"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0230"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0420"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0832"},{"source":"cve@mitre.org","url":"https://access.redhat.com/errata/RHSA-2019:2699"},{"source":"cve@mitre.org","url":"https://access.redhat.com/errata/RHSA-2019:2978"},{"source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1692"},{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory"],"url":"https://git.kernel.org/linus/7b55851367136b1efd84d98fea81ba57a98304cf"},{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory"],"url":"https://gitlab.freedesktop.org/polkit/polkit/commit/c898fdf4b1aafaa04f8ada9d73d77c8bb76e2f81"},{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory"],"url":"https://gitlab.freedesktop.org/polkit/polkit/merge_requests/19"},{"source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html"},{"source":"cve@mitre.org","url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"},{"source":"cve@mitre.org","url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://support.f5.com/csp/article/K22715344"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3901-1/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3901-2/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3903-1/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3903-2/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3908-1/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3908-2/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3910-1/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3910-2/"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3934-1/"},{"source":"cve@mitre.org","url":"https://usn.ubuntu.com/3934-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00049.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/106537"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0230"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0420"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2019:0832"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2019:2699"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2019:2978"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"],"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1692"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://git.kernel.org/linus/7b55851367136b1efd84d98fea81ba57a98304cf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://gitlab.freedesktop.org/polkit/polkit/commit/c898fdf4b1aafaa04f8ada9d73d77c8bb76e2f81"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://gitlab.freedesktop.org/polkit/polkit/merge_requests/19"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2019/01/msg00021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://support.f5.com/csp/article/K22715344"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3901-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3901-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3903-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3903-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3908-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3908-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3910-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3910-2/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3934-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://usn.ubuntu.com/3934-2/"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"nvd@nist.gov","type":"Primary"}]}
|