CveMateVulnerability intelligence

Rsbac vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rsbac products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

Rule Set Based Access Control2 vulnerabilities

CVE-2007-3945rsbacrule_set_based_access_control19y ago23-07-2007 23:00

Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.CVE-2004-0667gentoolinux+122y ago13-07-2004 04:00

Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.