Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9pvg-w7xf-pgq7

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

EPSS

Процентиль: 8%
0.0003
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 7 лет назад

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

CVSS3: 5.5
redhat
больше 7 лет назад

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

CVSS3: 5.5
nvd
больше 7 лет назад

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

CVSS3: 5.5
debian
больше 7 лет назад

An authentication bypass flaw has been found in PackageKit before 1.1. ...

suse-cvrf
больше 7 лет назад

Security update for PackageKit

EPSS

Процентиль: 8%
0.0003
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-287