VULNERABILITY INTELLIGENCE

CVE-2021-34395

CVSS score3.9 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2021-06-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

Description

Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references