This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2022-21946 | BDVDB-2026-172016 Detail

openSUSEFactory

Description#

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-732 Incorrect Permission Assignment for Critical Resource

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.