In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
| Software | From | Fixed in |
|---|---|---|
| consolekit_project / consolekit | - | 0.4.2 |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |