Vulnerabilidades do Presire Qsnapper
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Presire Qsnapper: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:presire:qsnapper
CVE-2026-41049
Alta · 7.1
CWE-863 22/06/2026
Caching of Authentication allows Authentication Bypass between users in qSnapper
Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed any local attacker to use dbus functions after a privileged users has authenticated for them.
CVE-2026-41048
Alta · 7.1
CWE-863 22/06/2026
Caching of Authentication allows Authentication Bypass in qSnapper
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local attacker to use functions like "restore from snapshot" even if only allowed to do "delete snapshot".
CVE-2026-41047
Média · 5.5
CWE-306 22/06/2026
Information leak via “diff” methods in qSnapper
Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacker to see otherwise read protected information.
CVE-2026-41046
Alta · 7.3
CWE-23 22/06/2026
path traversal via `config` parameter in qSnapper
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.
CVE-2026-41045
Alta · 7.0
CWE-367 22/06/2026
Weak polkit authentication check in qSnapper
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user.