| 제목 | Kylin OS privilege escalation vulnerability |
|---|
| 설명 | #Describe
The kylin-activation package is a component used by Kylin OS for authorization verification and activation. The software package does not strictly restrict the legality of the import file operation, so the directory where the system configuration file is located is imported into an illegal configuration file, resulting in the elevation of local privileges of ordinary users.
#Hazard level
High
#Affected version
Desktop：kylin-activation < 1.3.11-23
Server：kylin-activation < 1.30.10-5.p23 |
|---|
| 원천 | ⚠️ https://github.com/i900008/vulndb/blob/main/kylin-activation_vuln.md |
|---|
| 사용자 | Set3r.Pan (UID 28571) |
|---|
| 제출 | 2023. 02. 24. AM 02:50 (4 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 03. AM 07:56 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 222260 [KylinSoft kylin-activation 전에 1.3.11-23/1.30.10-5.p23 켜짐 KylinOS File Import 권한 상승] |
|---|
| 포인트들 | 20 |
|---|