cbcvebase.

Martin Pitt Jockey vulnerabilities

1 known vulnerability affecting martin_pitt/jockey.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2013-1065P4MEDIUMCVSS 4.6≤ 0.9.7-0ubuntu7.10v0.9.7-0ubuntu7+9 more2013-10-03
CVE-2013-1065 [MEDIUM] CWE-264 CVE-2013-1065: backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a p backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
nvd
Martin Pitt Jockey vulnerabilities | cvebase