Herjavec Group Blog Threat Advisory: CVE-2021-4034: 'PwnKit'

Overview On Tuesday, January 25th, researchers from Qualys disclosed the discovery of a local privilege escalation vulnerability in Linux's pkexec tool - CVE-2021-4034, which they have dubbed PwnKit. Pkexec is part of the PolKit package and is commonly used within systemd-based Linux distributions[1]. Qualys have confirmed the default installations of Ubuntu, Debian, Fedora, and CentOS [...]