Security Advisory

CVE-2017-2663

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-27 20:00:00

Last updated 2024-08-05 14:02:07

Assigner redhat

CVSS score 8.2

State PUBLISHED

Description

It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.

← Browse all CVEs View on cve.org ↗