Research
Polkit Authentication Bypass Local Privesc Vulnerability
This paper details a polkit authentication bypass vulnerability enabling unprivileged users to call privileged methods by gaining root access via dbus.
Key Pointers:
- Understanding the vulnerability and the key terms used throughout the paper
- Understanding how the exploit works
- Taking a look at the severity and scope of impact of this vulnerability
- Setting up the lab for exploitation
- Exploiting the vulnerability and learning how to mitigate it