Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register

Summary

Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows Privilege Escalation. This issue affects eta-register: from 2.0.8 before 2.0.9.

Remediation

1. Inventory every TÜBİTAK BİLGEM Software Technologies Research Institute eta-register deployment, including staging.
2. Upgrade TÜBİTAK BİLGEM Software Technologies Research Institute eta-register to 2.0.9.
3. Confirm the running version after the upgrade.

References

• Referencehttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1440