The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.
CVSS Vector
AV:L/AC:L/Au:N/C:N/I:P/A:NMate Desktop Mate Settings Daemon
APPMate-Desktop1.5.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2023-51698CRITICAL9.6PL ✓ten sam vendor
Command Injection w Atril poprzez spreparowany plik CBT
CVE-2023-52138HIGH8.2ten sam vendor
Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversa...
CVE-2023-52076HIGH8.5ten sam vendor
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path travers...
CVE-2018-20681MEDIUM6.1ten sam vendor
mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view scree...