{"api_version":"1","generated_at":"2026-07-23T10:05:52+00:00","cve":"CVE-2022-3560","urls":{"html":"https://cve.report/CVE-2022-3560","api":"https://cve.report/api/cve/CVE-2022-3560.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-3560","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-3560"},"summary":{"title":"CVE-2022-3560","description":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.","state":"PUBLIC","assigner":"secalert@redhat.com","published_at":"2023-02-02 21:22:00","updated_at":"2023-11-07 03:51:00"},"problem_types":["CWE-22"],"metrics":[],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420#c0","name":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420#c0","refsource":"MISC","tags":[],"title":"2135420 – (CVE-2022-3560) CVE-2022-3560 pesign: Local privilege escalation on pesign systemd service","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3560","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3560","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"fedoraproject","cpe5":"fedora","cpe6":"37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"pesign_project","cpe5":"pesign","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"enterprise_linux","cpe6":"7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"enterprise_linux","cpe6":"8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2022","cve_id":"3560","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"redhat","cpe5":"enterprise_linux","cpe6":"9.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2022-3560","qid":"160494","title":"Oracle Enterprise Linux Security Update for pesign (ELSA-2023-1067)"},{"cve":"CVE-2022-3560","qid":"160502","title":"Oracle Enterprise Linux Security Update for pesign (ELSA-2023-1093)"},{"cve":"CVE-2022-3560","qid":"160527","title":"Oracle Enterprise Linux Security Update for pesign (ELSA-2023-1572)"},{"cve":"CVE-2022-3560","qid":"241236","title":"Red Hat Update for pesign (RHSA-2023:1066)"},{"cve":"CVE-2022-3560","qid":"241237","title":"Red Hat Update for pesign (RHSA-2023:1065)"},{"cve":"CVE-2022-3560","qid":"241238","title":"Red Hat Update for pesign (RHSA-2023:1067)"},{"cve":"CVE-2022-3560","qid":"241250","title":"Red Hat Update for pesign (RHSA-2023:1093)"},{"cve":"CVE-2022-3560","qid":"241325","title":"Red Hat Update for pesign (RHSA-2023:1572)"},{"cve":"CVE-2022-3560","qid":"241359","title":"Red Hat Update for pesign (RHSA-2023:1829)"},{"cve":"CVE-2022-3560","qid":"241622","title":"Red Hat Update for pesign (RHSA-2023:1586)"},{"cve":"CVE-2022-3560","qid":"241665","title":"Red Hat Update for pesign (RHSA-2023:1107)"},{"cve":"CVE-2022-3560","qid":"257228","title":"CentOS Security Update for pesign (CESA-2023:1093)"},{"cve":"CVE-2022-3560","qid":"283688","title":"Fedora Security Update for pesign (FEDORA-2023-e77628f240)"},{"cve":"CVE-2022-3560","qid":"283689","title":"Fedora Security Update for pesign (FEDORA-2023-5399953e3b)"},{"cve":"CVE-2022-3560","qid":"355157","title":"Amazon Linux Security Advisory for pesign : ALAS2023-2023-118"},{"cve":"CVE-2022-3560","qid":"378119","title":"Alibaba Cloud Linux Security Update for pesign (ALINUX2-SA-2023:0014)"},{"cve":"CVE-2022-3560","qid":"378415","title":"Alibaba Cloud Linux Security Update for pesign (ALINUX3-SA-2023:0034)"},{"cve":"CVE-2022-3560","qid":"753784","title":"SUSE Enterprise Linux Security Update for pesign (SUSE-SU-2023:0484-1)"},{"cve":"CVE-2022-3560","qid":"905436","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for pesign (13293)"},{"cve":"CVE-2022-3560","qid":"940953","title":"AlmaLinux Security Update for pesign (ALSA-2023:1067)"},{"cve":"CVE-2022-3560","qid":"940971","title":"AlmaLinux Security Update for pesign (ALSA-2023:1572)"},{"cve":"CVE-2022-3560","qid":"960669","title":"Rocky Linux Security Update for pesign (RLSA-2023:1067)"},{"cve":"CVE-2022-3560","qid":"960899","title":"Rocky Linux Security Update for pesign (RLSA-2023:1572)"}]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2022-3560","ASSIGNER":"secalert@redhat.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-22->CWE-269","cweId":"CWE-22"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"pesign","version":{"version_data":[{"version_value":"All versions up to pesign-115","version_affected":"="}]}}]}}]}},"references":{"reference_data":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420#c0","refsource":"MISC","name":"https://bugzilla.redhat.com/show_bug.cgi?id=2135420#c0"}]}},"nvd":{"publishedDate":"2023-02-02 21:22:00","lastModifiedDate":"2023-11-07 03:51:00","problem_types":["CWE-22"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:pesign_project:pesign:*:*:*:*:*:*:*:*","versionEndExcluding":"116","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}