Description
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse.

This issue affects pardus-domain-joiner: before 0.5.5.
Published: 2026-08-06
Score: 3.3 Low
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute's pardus-domain-joiner allows an attacker to abuse privilege and terminate arbitrary processes, a weakness categorized as CWE‑283. The defect arises when ownership checks are bypassed, enabling a user with sufficient local access to kill any process, thereby potentially disrupting services or compromising system stability.

Affected Systems

The vulnerability affects TÜBİTAK BİLGEM Software Technologies Research Institute’s pardus-domain-joiner on all versions earlier than 0.5.5.

Risk and Exploitability

The CVSS score of 3.3 indicates a low severity, and the EPSS score is not available; the vulnerability is not listed in the CISA KEV catalogue. Attackers likely need local access with some form of elevated privileges to abuse the ownership check, though the exact attack vector is inferred rather than explicitly documented.

Generated by OpenCVE AI on August 6, 2026 at 15:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade pardus‑domain‑joiner to version 0.5.5 or later
  • Configure the application to run with the least privilege required and enforce strict ownership validation
  • Monitor system logs for suspicious process termination events and audit privilege changes

Generated by OpenCVE AI on August 6, 2026 at 15:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 06 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 06 Aug 2026 13:15:00 +0000

Type Values Removed Values Added
Description Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5.
Title Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner
Weaknesses CWE-283
References
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}


Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published:

Updated: 2026-08-06T14:42:17.468Z

Reserved: 2026-07-13T14:13:50.482Z

Link: CVE-2026-15599

cve-icon Vulnrichment

Updated: 2026-08-06T14:42:11.375Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T15:15:12Z

Weaknesses