CVE-2017-7572

Name of the Vulnerable Software and Affected Versions Back In Time versions 1.1.18 and earlier

Description The issue concerns a race condition in the authorization method used by the checkPolkitPrivilege function. This function utilizes a deprecated polkit authorization method, which is susceptible to a time of check, time of use issue. The polkitd checks the owner of a process requesting a polkit operation via /proc//status. However, by the time this check is performed, the requesting process may have been replaced by a different process with the same PID but different privileges.

Recommendations For Back In Time versions 1.1.18 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.