Unprivileged User Access and Privilege Escalation Vulnerability in subscription-manager's DBus Interface

CVE-2017-2663 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain access to private information, or launch a privilege escalation attack.

Learn more about our Cis Benchmark Audit For Red Hat Enterprise Linux.