HIGH CISA KEV

CVE-2021-3560

CVSS v3

7.8

HIGH

EPSS Score

10.9%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CISA Known Exploited Vulnerability

Date Added
5/12/2023
Patch Due Date
6/2/2023
Ransomware Use
Unknown

Technical details

Published
2/16/2022

Frequently asked questions

What is CVE-2021-3560?

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Is CVE-2021-3560 actively exploited?

Yes. CVE-2021-3560 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 6/2/2023.

What is the CVSS score for CVE-2021-3560?

CVE-2021-3560 has a CVSS v3 base score of 7.8 (HIGH severity).

Is CVE-2021-3560 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.