EDB-46743
functionalsystemd - Lack of Seat Verification in PAM Module Permits Spoofing Active Session to polkit
view exploit source exploit_dbverifiedtype dosauthor Google Security Researchpublished 2019-04-23catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-3842US | high7.0OT elevated | Exploit | ||
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in som… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan