CWE Code: 862
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Missing Authorization
Summary: dde-daemon, the daemon process of dde (deepin desktop environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through d-bus. anybody can change the grub config, even to append some arguments to make a backdoor or privilege escalation, by calling dowritegrubsettings() provided by dde-daemon.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-04-10
Last Modified Date: 2019-10-03