What it is
Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Red Hat entries on the list
- Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 · Aug 26, 2026
- Libuser Red Hat Libuser Race Condition Vulnerability CVE-2015-3246 · Aug 26, 2026
- JBoss RichFaces Framework Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability CVE-2018-14667 · Sep 28, 2023
- Polkit Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 · Jun 27, 2022
- JBoss Red Hat JBoss Information Disclosure Vulnerability CVE-2010-1428 · May 25, 2022
- JBoss Red Hat JBoss Authentication Bypass Vulnerability CVE-2010-0738 · May 25, 2022