Security Advisory
CVE-2022-29934
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.