Permissions Vulnerability in AccountsService by Ubuntu
CVE-2022-1804

5.5MEDIUM

Key Information:

Vendor

Ubuntu

Status
Linux
Vendor
CVE Published:
25 March 2025

What is CVE-2022-1804?

The AccountsService component in Ubuntu has a flaw that affects how permissions are managed when writing to .pam_environment. As a result, improper handling of permissions can potentially lead to unauthorized access or privilege escalation in the system. Administrators are advised to update to the latest version to mitigate this risk effectively.

Affected Version(s)

Linux Linux 0.6.55-3ubuntu1 < 22.07.5-2ubuntu1.3

References

https://bugs.launchpad.net/ubuntu/+source/accountsservice...
issue-tracking
https://ubuntu.com/security/notices/USN-5439-1
release-notes

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gunnar Hjalmarsson
Marc Deslauriers
Seth Arnold
.