CVE-2012-5617 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 26%

Affected Products (NVD)

Vendor	Product	Version
gksu-polkit_project	gksu-polkit	-

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

gksu-polkit

hardy	dne
lucid	ignored
oneiric	ignored
precise	ignored
quantal	ignored
raring	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

Common Weakness Enumeration

CWE-269 - Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099739.html

http://www.openwall.com/lists/oss-security/2012/12/12/8

http://www.securityfocus.com/bid/56918

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5617

https://security-tracker.debian.org/tracker/CVE-2012-5617

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099739.html

http://www.openwall.com/lists/oss-security/2012/12/12/8

http://www.securityfocus.com/bid/56918

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5617

https://security-tracker.debian.org/tracker/CVE-2012-5617