ID:7906 - Exploit for Permissions, Privileges, and Access Controls in polkit - CVE-2021-3560

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in the "polkit_system_bus_name_get_creds_sync" function, which leads to security restrictions bypass and privilege escalation.

Remediation