Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxjh-5564-f256

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

EPSS

Процентиль: 2%
0.00123
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-279

Связанные уязвимости

CVSS3: 5.5
ubuntu
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
redhat
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
nvd
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall state without proper authentication, leading to unauthorized changes in network security configurations.

CVSS3: 5.5
msrc
3 месяца назад

Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

CVSS3: 5.5
debian
4 месяца назад

A flaw was found in firewalld. A local unprivileged user can exploit t ...

EPSS

Процентиль: 2%
0.00123
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-279