CWE-268 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-268/ Sun, 26 Feb 2023 06:33:15 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-268 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-268/ 32 32 CVE-2019-3844 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-3844/ Sun, 26 Feb 2023 06:33:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-3844/ It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially […]

The post CVE-2019-3844 appeared first on CVE Vulnerability.

]]> It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.

The post CVE-2019-3844 appeared first on CVE Vulnerability.

]]> CVE-2023-0759 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0759/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0759 Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

The post CVE-2023-0759 appeared first on CVE Vulnerability.

]]> Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

The post CVE-2023-0759 appeared first on CVE Vulnerability.

]]>