CVE-2022-21946

CVE-2022-21946 is an Incorrect Permission Assignment for Critical Resource vulnerability in the cscreen utility within openSUSE Factory, affecting versions 1.2-1.3 and prior. This local vulnerability allows any unprivileged user to gain the permissions of the tty and dialout groups, enabling them to access and manipulate any active cscreen session. With a CVSS score of 5.3 (Medium), it requires local access and has low attack complexity, potentially leading to limited confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.