CVE-2023-5521CWE-863

Incorrect Authorization in tiann/kernelsu

High · published October 11, 2023

CVSS v3.0
7.3
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

⚡ An authorization hiccup in kernelsu could let anyone play the role of the system administrator! 🔥 Think of it like a restaurant where the waiter mistakenly gives diners the keys to the kitchen instead of just taking their orders — they could whip up anything without oversight! An attacker could gain unauthorized access to sensitive operations, leading to potential data breaches and system tampering. This could mean changing configurations, accessing private data, or even disrupting services!

Put simply

Think of it like a restaurant where the waiter mistakenly gives diners the keys to the kitchen instead of just taking their orders — they could whip up anything without oversight! This vulnerability arises from incorrect authorization checks in the kernelsu repository, allowing privileged actions to be executed by users who should not have access. This can lead to unexpected behavior and security risks within the application.

What to do

An attacker could gain unauthorized access to sensitive operations, leading to potential data breaches and system tampering. This could mean changing configurations, accessing private data, or even disrupting services! Update the kernelsu package to version 0.6.9 or later to close this loophole. Additionally, review your authorization mechanisms to ensure that they are correctly configured and enforced across your system. You've got this! With a quick update, you'll shore up your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00673 · 51.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-10-11T12:00Z
EPSS history
Timeline
  • 11 OCT 12:00Z
    Incorrect Authorization in tiann/kernelsu
    cvelistv5