An authentication bypass on polkit which allows unprivileged user to call privileged methods using DBus
Polkit-exploit – CVE-2021-3560 Privilege escalation with polkit – CVE-2021-3560 CVE-2021-3560 is an authentication bypass on polkit, which allows unprivileged user to call privileged methods using DBus, in this exploit we will call 2 privileged methods provided by accountsservice (CreateUser and SetPassword), which allows us to create a priviliged user then setting a password to it and at the end logging as the created user and then elevate to root. Ahmad Almorabea @almorabea http://almorabea.net [emailย protected]:~/Desktop$ python3 CVE-2021-3560.py ************** Exploit: Privilege escalation […]
Read more