CVE-2022-21946

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-219478.8A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dash CVE-2022-219486.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to pl CVE-2022-219498.8A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference extern CVE-2022-219505.3A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allow CVE-2022-219516.8A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change CVE-2022-219527.5A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows re CVE-2022-219538.8A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in CVE-2022-219546.1Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2022-219577.2Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability CVE-2022-219586.8Windows Resilient File System (ReFS) Remote Code Execution Vulnerability CVE-2022-219596.8Windows Resilient File System (ReFS) Remote Code Execution Vulnerability CVE-2022-21968.8A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks