| عنوان | Kylin OS privilege escalation vulnerability |
|---|
| الوصف | #Describe
The kylin-activation package is a component used by Kylin OS for authorization verification and activation. The software package does not strictly restrict the legality of the import file operation, so the directory where the system configuration file is located is imported into an illegal configuration file, resulting in the elevation of local privileges of ordinary users.
#Hazard level
High
#Affected version
Desktop：kylin-activation < 1.3.11-23
Server：kylin-activation < 1.30.10-5.p23 |
|---|
| المصدر | ⚠️ https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md |
|---|
| المستخدم | Set3r.Pan (UID 28571) |
|---|
| ارسال | 24/02/2023 02:50 AM (4 سنوات منذ) |
|---|
| الاعتدال | 03/03/2023 07:56 AM (7 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 222260 [KylinSoft kylin-activation قبل 1.3.11-23/1.30.10-5.p23 على KylinOS File Import تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|