Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
KylinSoft hedron-domain-hook DBus init_kcm access control
Vulnerability Description
A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function init_kcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-248578 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
访问控制不恰当
Vulnerability Title
KylinSoft hedron-domain-hook 访问控制错误漏洞
Vulnerability Description
KylinSoft hedron-domain-hook是中国麒麟软件（KylinSoft）公司的一个组件。 KylinSoft hedron-domain-hook 3.8.0.12-0k0.5及之前版本存在访问控制错误漏洞，该漏洞源于组件DBus Handler的init_kcm函数存在安全问题，导致不正确的访问控制。
CVSS Information
N/A
Vulnerability Type
N/A