CVE-2019-3842: High severity ibm cloud pak for security vulnerability
In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possible for an attacker, in some particular configurations, to set a XDGSEAT environment variable which allows for commands to be checked against polkit policies using the "allowactive" element rather than "allowany".
Other sources
systemd could allow a local authenticated attacker to gain elevated privileges on the system, caused by the failure to properly sanitize the environment before using the XDGSEAT variable by pamsystemd. By spoofing an active session to PolicyKit, an authenticated attacker could exploit this vulnerability to gain additional PolicyKit privileges.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3842?
CVE-2019-3842 is a vulnerability in the systemd software that allows a local authenticated attacker to gain elevated privileges on the system.
How does CVE-2019-3842 work?
In systemd before v242-rc4, pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable, allowing an attacker to set a malicious XDG_SEAT environment variable and execute commands with elevated privileges.
Which software versions are affected by CVE-2019-3842?
IBM Cloud Pak for Security (CP4S) versions 1.7.2.0, 1.7.1.0, and 1.7.0.0, as well as systemd version 241 and versions 242-rc1, 242-rc2, and 242-rc3 are affected by CVE-2019-3842.
How severe is CVE-2019-3842?
CVE-2019-3842 has a severity level of 7, which is considered high.
How can I fix CVE-2019-3842?
Upgrade to systemd version v242-rc4 or a later version that includes the patch for CVE-2019-3842.