{"id":"CVE-2022-1804","aliases":["AZL-66686","EUVD-2022-25083","GHSA-v7v5-m765-h4w4","UBUNTU-CVE-2022-1804","USN-5439-1"],"status":"published","title":"Accountsservice incorrectly drops privileges","description":"accountsservice no longer drops permissions when writting .pam_environment","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00141,"percentile":0.0345,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2022-05-24T00:00:00Z","modified":"2026-06-17T04:23:08Z","fixes":[{"ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","fixed_in":["22.07.5-2ubuntu1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.6.55-4"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.07.5-2ubuntu1.3"}]}],"versions":["0.6.55-0ubuntu14","0.6.55-3ubuntu1","0.6.55-3ubuntu2","0.6.55-3ubuntu4","0.6.55-3ubuntu5","0.6.55-3ubuntu6","22.07.5-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"accountsservice","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.07.5-2ubuntu1.3"}]}],"versions":["0.6.55-0ubuntu14","0.6.55-3ubuntu1","0.6.55-3ubuntu2","0.6.55-3ubuntu4","0.6.55-3ubuntu5","0.6.55-3ubuntu6","22.07.5-2ubuntu1"]}],"products":[{"vendor":"canonical","product":"accountsservice"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"linux","product":"linux"},{"vendor":"ubuntu","product":"linux"}],"references":[{"url":"https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1974250","tags":["issue-tracking","Issue Tracking"]},{"url":"https://ubuntu.com/security/notices/USN-5439-1","tags":["release-notes","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1804","tags":["web"]},{"url":"https://github.com/advisories/GHSA-v7v5-m765-h4w4"},{"url":"https://ubuntu.com/security/CVE-2022-1804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1804","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-1804","title":"Accountsservice incorrectly drops privileges","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2025-03-25T12:28:08.041Z","modified":"2025-03-25T12:58:47.368Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-25083","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2025-03-25T12:28:08Z","modified":"2025-03-25T12:58:47Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:54.153762Z"}],"ghsa":[{"id":"GHSA-v7v5-m765-h4w4","title":"accountsservice no longer drops permissions when writting .pam_environment","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2025-03-25T15:31:29Z","modified":"2025-03-25T15:31:34Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:00:26.443231Z"}],"nvd":[{"id":"CVE-2022-1804","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2025-03-25T13:15:38.703Z","modified":"2026-06-17T04:23:08.613Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:42.374052Z"}],"osv":[{"id":"UBUNTU-CVE-2022-1804","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2022-05-24T00:00:00Z","modified":"2026-04-22T13:15:16.429358Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"AZL-66686","title":"CVE-2022-1804 affecting package accountsservice 0.6.55-4","description":"accountsservice no longer drops permissions when writting .pam_environment","status":"published","published":"2025-03-25T13:15:38Z","modified":"2026-04-21T04:37:57.346874Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"USN-5439-1","title":"accountsservice vulnerability","description":"Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped\nprivileges. A local user could possibly use this issue to cause\nAccountsService to crash or stop responding, resulting in a denial of\nservice. (CVE-2022-1804)\n","status":"published","published":"2022-05-24T11:36:02Z","modified":"2026-04-22T10:23:43.044454Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}