NetSight
high7.8

CVE-2022-29934

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec.

Impact

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.

Affected products

VendorProductAffected versions
UsuOracle Optimization
Version 5.16.2

Weakness classification

References