{"id":"CVE-2021-3560","aliases":["ALPINE-CVE-2021-3560","BELL-CVE-2021-3560","DEBIAN-CVE-2021-3560","EUVD-2021-26871","GHSA-7c49-j253-wq5r","MGASA-2021-0244","OESA-2021-1230","RHSA-2021:2236","RHSA-2021:2237","RHSA-2021:2238","RHSA-2021:2522","RHSA-2021:2555","RLSA-2021:2238","SUSE-SU-2021:1842-1","SUSE-SU-2021:1843-1","SUSE-SU-2021:1844-1","UBUNTU-CVE-2021-3560","USN-4980-1","openSUSE-SU-2021:0838-1","openSUSE-SU-2021:1843-1","openSUSE-SU-2024:11180-1"],"status":"published","title":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.21768,"percentile":0.97655,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-754","CWE-863"],"published":"2021-06-03T07:00:00Z","modified":"2026-11-03T06:32:39Z","kev":{"date_added":"2023-05-12","due_date":"2023-06-02","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-05-12"},{"source":"kev","since":"2023-05-12"}],"exploits":[{"source":"metasploit","id":"exploit/linux/local/polkit_dbus_auth_bypass","title":"Polkit D-Bus Authentication Bypass","type":"exploit","platform":"Linux,Unix","date":"2021-06-03","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/polkit_dbus_auth_bypass"},{"source":"pocgithub","id":"aancw/polkit-auto-exploit","title":"aancw/polkit-auto-exploit","date":"2021-06-11","url":"https://github.com/aancw/polkit-auto-exploit"},{"source":"pocgithub","id":"swapravo/polkadots","title":"swapravo/polkadots","date":"2021-06-11","url":"https://github.com/swapravo/polkadots"},{"source":"pocgithub","id":"hakivvi/CVE-2021-3560","title":"hakivvi/CVE-2021-3560","date":"2021-06-12","url":"https://github.com/hakivvi/CVE-2021-3560"},{"source":"pocgithub","id":"iSTAR-Lab/CVE-2021-3560_PoC","title":"iSTAR-Lab/CVE-2021-3560_PoC","date":"2021-06-14","url":"https://github.com/iSTAR-Lab/CVE-2021-3560_PoC"},{"source":"pocgithub","id":"secnigma/CVE-2021-3560-Polkit-Privilege-Esclation","title":"secnigma/CVE-2021-3560-Polkit-Privilege-Esclation","date":"2021-06-14","url":"https://github.com/secnigma/CVE-2021-3560-Polkit-Privilege-Esclation"},{"source":"exploitdb","id":"EDB-50011","title":"Polkit 0.105-26 0.117-2 - Local Privilege Escalation","type":"local","platform":"linux","date":"2021-06-15","verified":true,"url":"https://www.exploit-db.com/exploits/50011"},{"source":"pocgithub","id":"curtishoughton/CVE-2021-3560","title":"curtishoughton/CVE-2021-3560","date":"2021-06-15","url":"https://github.com/curtishoughton/CVE-2021-3560"},{"source":"pocgithub","id":"Almorabea/Polkit-exploit","title":"Almorabea/Polkit-exploit","date":"2021-06-19","url":"https://github.com/Almorabea/Polkit-exploit"},{"source":"pocgithub","id":"AssassinUKG/Polkit-CVE-2021-3560","title":"AssassinUKG/Polkit-CVE-2021-3560","date":"2021-06-29","url":"https://github.com/AssassinUKG/Polkit-CVE-2021-3560"},{"source":"pocgithub","id":"cpu0x00/CVE-2021-3560","title":"cpu0x00/CVE-2021-3560","date":"2021-07-02","url":"https://github.com/cpu0x00/CVE-2021-3560"},{"source":"pocgithub","id":"BizarreLove/CVE-2021-3560","title":"BizarreLove/CVE-2021-3560","date":"2021-07-28","url":"https://github.com/BizarreLove/CVE-2021-3560"},{"source":"pocgithub","id":"0dayNinja/CVE-2021-3560","title":"0dayNinja/CVE-2021-3560","date":"2021-07-30","url":"https://github.com/0dayNinja/CVE-2021-3560"},{"source":"pocgithub","id":"admin-079/CVE-2021-3560","title":"admin-079/CVE-2021-3560","date":"2021-11-12","url":"https://github.com/admin-079/CVE-2021-3560"},{"source":"pocgithub","id":"chenaotian/CVE-2021-3560","title":"chenaotian/CVE-2021-3560","date":"2022-01-31","url":"https://github.com/chenaotian/CVE-2021-3560"},{"source":"pocgithub","id":"NeonWhiteRabbit/CVE-2021-3560","title":"NeonWhiteRabbit/CVE-2021-3560","date":"2022-02-02","url":"https://github.com/NeonWhiteRabbit/CVE-2021-3560"},{"source":"pocgithub","id":"f4T1H21/CVE-2021-3560-Polkit-DBus","title":"f4T1H21/CVE-2021-3560-Polkit-DBus","date":"2022-02-13","url":"https://github.com/f4T1H21/CVE-2021-3560-Polkit-DBus"},{"source":"pocgithub","id":"RicterZ/CVE-2021-3560-Authentication-Agent","title":"RicterZ/CVE-2021-3560-Authentication-Agent","date":"2022-04-29","url":"https://github.com/RicterZ/CVE-2021-3560-Authentication-Agent"},{"source":"pocgithub","id":"winmin/CVE-2021-3560","title":"winmin/CVE-2021-3560","date":"2022-04-30","url":"https://github.com/winmin/CVE-2021-3560"},{"source":"pocgithub","id":"UNICORDev/exploit-CVE-2021-3560","title":"UNICORDev/exploit-CVE-2021-3560","date":"2022-05-02","url":"https://github.com/UNICORDev/exploit-CVE-2021-3560"},{"source":"pocgithub","id":"asepsaepdin/CVE-2021-3560","title":"asepsaepdin/CVE-2021-3560","date":"2023-07-10","url":"https://github.com/asepsaepdin/CVE-2021-3560"},{"source":"pocgithub","id":"pashayogi/ROOT-CVE-2021-3560","title":"pashayogi/ROOT-CVE-2021-3560","date":"2023-08-20","url":"https://github.com/pashayogi/ROOT-CVE-2021-3560"},{"source":"pocgithub","id":"TieuLong21Prosper/CVE-2021-3560","title":"TieuLong21Prosper/CVE-2021-3560","date":"2023-10-06","url":"https://github.com/TieuLong21Prosper/CVE-2021-3560"},{"source":"pocgithub","id":"LucasPDiniz/CVE-2021-3560","title":"LucasPDiniz/CVE-2021-3560","date":"2023-11-08","url":"https://github.com/LucasPDiniz/CVE-2021-3560"},{"source":"pocgithub","id":"Kyyomaa/CVE-2021-3560-EXPLOIT","title":"Kyyomaa/CVE-2021-3560-EXPLOIT","date":"2024-03-24","url":"https://github.com/Kyyomaa/CVE-2021-3560-EXPLOIT"},{"source":"pocgithub","id":"arcslash/exploit_CVE-2021-3560","title":"arcslash/exploit_CVE-2021-3560","date":"2025-02-18","url":"https://github.com/arcslash/exploit_CVE-2021-3560"},{"source":"pocgithub","id":"titusG85/SideWinder-Exploit","title":"titusG85/SideWinder-Exploit","date":"2025-05-09","url":"https://github.com/titusG85/SideWinder-Exploit"}],"exploits_more":8,"fixes":[{"ecosystem":"Alpine:v3.14","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"polkit","fixed_in":["0.119-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"policykit-1","fixed_in":["0.105-31"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"policykit-1","fixed_in":["0.105-31"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"policykit-1","fixed_in":["0.105-31"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"polkit","fixed_in":["0.116-1.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"polkit","fixed_in":["0.118-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"polkit","fixed_in":["0.116-7.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-devel","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-docs","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-libs","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-9.el8_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-devel","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-docs","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-11.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debuginfo","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debugsource","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-devel","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-docs","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs-debuginfo","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"polkit","fixed_in":["0:0.115-11.el8_4.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"polkit","fixed_in":["0.113-5.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"polkit","fixed_in":["0.116-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"polkit","fixed_in":["0.116-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"polkit","fixed_in":["0.116-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"polkit","fixed_in":["0.114-3.12.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","fixed_in":["0.105-26ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"policykit-1","fixed_in":["0.105-31"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"polkit","fixed_in":["0.116-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"polkit","fixed_in":["0.116-3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.119-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-1.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.118-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-7.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-9.el8_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.6-20210615.0.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.6-20210615.0.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.3-6.rhaos4.7.git0d0f863.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.3-6.rhaos4.7.git0d0f863.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106252127.p0.git.8b4b094.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106252127.p0.git.8b4b094.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.3-6.rhaos4.7.git0d0f863.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.3-6.rhaos4.7.git0d0f863.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.3-6.rhaos4.7.git0d0f863.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-relay-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"dhcp-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12:4.3.6-41.el8_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106252127.p0.git.8b4b094.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106252127.p0.git.8b4b094.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106232224.p0.git.c7654fb.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106232224.p0.git.c7654fb.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106232224.p0.git.c7654fb.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106232224.p0.git.c7654fb.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"polkit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"polkit-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"polkit-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"polkit-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"python3-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-202106232224.p0.git.c7654fb.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.115-11.el8_4.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.113-5.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.114-3.12.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-26ubuntu1.1"}]}],"versions":["0.105-26ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-31"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"policykit-1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.105-26ubuntu1.1"}]}],"versions":["0.105-26ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.116-3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"polkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.118-7.2"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"polkit_project","product":"polkit"},{"vendor":"red hat","product":"polkit"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"redhat","product":"virtualization"},{"vendor":"redhat","product":"virtualization_host"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961710","tags":["x_transferred","Issue Tracking","Patch","Vendor Advisory","fix","report"]},{"url":"https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/","tags":["x_transferred","Exploit","Third Party Advisory","evidence","article"]},{"url":"http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html","tags":["x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3560","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3560","tags":["advisory"]},{"url":"https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug"},{"url":"https://github.com/advisories/GHSA-7c49-j253-wq5r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3560","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3560","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3560","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0244.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29076","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2238","tags":["web","advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1230","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2236","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2236.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3560","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3560","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2237","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2237.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2238.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2522","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2522.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24489","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24489","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3501","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3501","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3501","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-27219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-27219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27219","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2555","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1963258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976688","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2555.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25217","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25217","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2021-25217","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2238","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211842-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1186497","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3560","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211843-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211844-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3560","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4980-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ABSE3IWWQYLOHOVCNFCOZVXFZAYMJYN4/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2NCYKG2YTUVFTW5R7DJWWWJGLDWU7XE5/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6133","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T00:00:00Z","modified":"2025-10-21T23:15:46.259Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-26871","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T00:00:00Z","modified":"2025-10-21T23:15:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2023-05-12","updated_at":"2026-11-02T20:31:25.901288Z"}],"ghsa":[{"id":"GHSA-7c49-j253-wq5r","title":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests...","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-17T00:00:28Z","modified":"2025-10-22T00:32:30Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-754","CWE-863"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2021-3560","title":"Red Hat Polkit Incorrect Authorization Vulnerability","description":"Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.","cwes":["CWE-863"],"kev":{"date_added":"2023-05-12","due_date":"2023-06-02","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T19:15:08.45Z","modified":"2026-06-17T04:05:20.767Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-863","CWE-754"],"updated_at":"2026-11-02T14:07:04.6896Z"}],"osv":[{"id":"ALPINE-CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T19:15:08.45Z","modified":"2026-11-03T06:32:39.277395044Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2021-3560","title":"CVE-2021-3560 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:57.975082Z","modified":"2026-01-26T09:50:02.863234Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T19:15:08.45Z","modified":"2026-10-24T10:30:56.253291823Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:20.13324Z"},{"id":"DEBIAN-CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-02-16T19:15:08.45Z","modified":"2026-10-23T18:03:29.024652572Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.233346Z"},{"id":"OESA-2021-1230","title":"polkit security update","description":"polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3560)","status":"published","published":"2021-06-22T11:04:28Z","modified":"2026-08-18T01:15:44.971213192Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:2236","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-16T05:59:23Z","modified":"2025-11-22T12:21:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2237","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-16T05:59:30Z","modified":"2025-11-22T12:21:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2238","title":"Red Hat Security Advisory: polkit security update","status":"published","published":"2024-09-16T05:59:36Z","modified":"2025-11-22T12:21:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:2522","title":"Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]","status":"published","published":"2024-09-16T05:59:44Z","modified":"2026-10-15T10:01:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2555","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.19 packages and security update","status":"published","published":"2024-09-16T05:59:50Z","modified":"2026-08-07T10:03:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:2238","title":"Important: polkit security update","description":"The polkit packages provide a component for controlling system-wide privileges. This component provides a uniform and organized way for non-privileged processes to communicate with privileged ones.\n\nSecurity Fix(es):\n\n* polkit: local privilege escalation using polkit_system_bus_name_get_creds_sync() (CVE-2021-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-03T07:54:47Z","modified":"2026-02-04T09:30:10.839508Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3560","description":"It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-06-03T07:00:00Z","modified":"2026-04-22T12:56:11.665206Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.870979Z"},{"id":"MGASA-2021-0244","title":"Updated polkit packages fix a security vulnerability","description":"A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkit_system_bus_name_get_creds_sync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process (CVE-2021-3560).\n","status":"published","published":"2021-06-08T21:45:12Z","modified":"2026-04-16T04:40:59.312062119Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0838-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-06-04T08:34:08Z","modified":"2026-02-04T03:41:04.007762Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:1843-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).\n","status":"published","published":"2021-07-11T12:11:00Z","modified":"2026-02-04T03:45:45.859701Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2024:11180-1","title":"libpolkit0-0.118-7.2 on GA media","description":"These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:33.348342Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2021:1842-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).\n","status":"published","published":"2021-06-03T14:21:32Z","modified":"2025-05-02T04:10:45.822399Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1843-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).\n","status":"published","published":"2021-06-03T14:22:54Z","modified":"2026-02-04T02:33:46.370757Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1844-1","title":"Security update for polkit","description":"This update for polkit fixes the following issues:\n\n- CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).\n","status":"published","published":"2021-06-03T14:23:36Z","modified":"2026-02-04T03:32:30.733319Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4980-1","title":"policykit-1 vulnerability","description":"Kevin Backhouse discovered that polkit incorrectly handled errors in the\npolkit_system_bus_name_get_creds_sync function. A local attacker could\npossibly use this issue to escalate privileges.\n","status":"published","published":"2021-06-03T10:51:20Z","modified":"2026-04-22T10:14:16.695252Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}