| Package | Affected versions | Patched versions |
|---|---|---|
| qsnapper | < 1.3.3 | 1.3.3 |
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free