Mummunan rauni a cikin PolKit yana ba da damar tushen tushen akan yawancin rarrabawar Linux
Qualys ya gano wani rauni (CVE-2021-4034) a cikin tsarin tsarin Polkit (tsohon PolicyKit) da aka yi amfani da shi wajen rarrabawa don ƙyale masu amfani marasa gata suyi ayyukan da ke buƙatar haƙƙin samun dama. Rashin lahani yana ba da damar mai amfani na gida mara amfani don haɓaka damar su don tushen da samun cikakken iko da tsarin. Matsalar ta kasance mai suna PwnKit kuma sananne ne don shirye-shiryen yin amfani da aiki wanda ke aiki a cikin […]