漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.
CVSS Information
N/A
Vulnerability Type
特权上下文切换错误
Vulnerability Title
Red Hat Candlepin subscription-manager 权限许可和访问控制漏洞
Vulnerability Description
Red Hat Candlepin是美国红帽(Red Hat)公司的一套用于管理软件订阅的工具。subscription-manager是其中的一个GUI和CLI客户端。 Red Hat Candlepin subscription-manager 1.19.0-1版本和1.19.3-1版本中存在本地提权漏洞。本地攻击者可利用该漏洞获取提升的权限。
CVSS Information
N/A
Vulnerability Type
N/A