CVE-2022-21946CWE-732

suddoers configuration for cscreen not restrictive enough

Medium · published March 16, 2022

CVSS v3.1
5.3
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-03-16T10:05Z
EPSS history
Timeline
  • 16 MAR 10:05Z
    suddoers configuration for cscreen not restrictive enough
    cvelistv5