CVE-2021-3560

KEV
Published: Feb 16, 2022 Last Modified: Nov 06, 2025 EU-VD ID: EUVD-2021-26871 Aliases: GSD-2021-3560
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,2
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,1215
Percentile
0,9th
Updated

EPSS Score Trend (Last 90 Days)

754

Improper Check for Unusual or Exceptional Conditions

Incomplete
Common Consequences
Security Scopes Affected:
Integrity Availability
Potential Impacts:
Dos: Crash, Exit, Or Restart Unexpected State
Applicable Platforms
All platforms may be affected
View CWE Details
863

Incorrect Authorization

Incomplete
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Access Control Availability
Potential Impacts:
Read Application Data Read Files Or Directories Modify Application Data Modify Files Or Directories Gain Privileges Or Assume Identity Bypass Protection Mechanism Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other)
Applicable Platforms
Technologies: Database Server, Not Technology-Specific, Web Server
View CWE Details
Exploit

Polkit 0.105-26 0.117-2 - Local Privilege Escalation

Verified

Polkit 0.105-26 0.117-2 - Local Privilege Escalation

View Exploit Code →
Application

Openshift Container Platform by Redhat

cpe:2.3:a:redhat:openshift_container_platform:4.7:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Virtualization by Redhat

cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Polkit by Polkit Project

Version Range Affected
To 0.119 (exclusive)
cpe:2.3:a:polkit_project:polkit:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Virtualization Host by Redhat

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021…
http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html
http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
https://bugzilla.redhat.com/show_bug.cgi?id=1961710
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-b…
http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html
http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
https://bugzilla.redhat.com/show_bug.cgi?id=1961710
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-b…