Privilege Escalation Vulnerability in glib: Information Leakage via pkexec

Privilege Escalation Vulnerability in glib: Information Leakage via pkexec

CVE-2021-3800 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Learn more about our User Device Pen Test.