CVE-2019-19522

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the…

published December 4, 2019

CVSS
—
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the auth group. This occurs because root's file can be written to /etc/skey or /var/db/yubikey, and need not be owned by root.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Published
2019-12-04T23:33Z
EPSS history
Timeline
  • 04 DEC 23:33Z
    OpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled, allows local users to become root by leveraging membership in the…
    cvelistv5