Rsbac Rule Set Based Access Control vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rsbac Rule Set Based Access Control, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2007-3945rsbacrule_set_based_access_control
EPSS score
2.48%
Rule Set Based Access Control (RSBAC) before 1.3.5 does not properly use the Linux Kernel Crypto API for the Linux kernel 2.6.x, which allows context-dependent attackers to bypass authentication controls via unspecified vectors, possibly involving User Management password hashing and unchecked function return codes.7.2CVE-2004-0667gentoolinux+1
EPSS score
0.42%
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.