CVE-2020-16121

Опубликовано: 07 нояб. 2020

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

Ссылки

https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887
Issue Tracking
Third Party Advisory
https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Exploit
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887
Issue Tracking
Third Party Advisory
https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:packagekit_project:packagekit:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 28%

0.00102

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-209

Связанные уязвимости

CVE-2020-16121

CVSS3: 3.3

ubuntu

больше 5 лет назад

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CVE-2020-16121

CVSS3: 2.5

redhat

больше 5 лет назад

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CVE-2020-16121

CVSS3: 3.3

debian

больше 5 лет назад

PackageKit provided detailed error messages to unprivileged callers th ...

openSUSE-SU-2020:2344-1

suse-cvrf

около 5 лет назад

Security update for PackageKit

openSUSE-SU-2020:2292-1

suse-cvrf

около 5 лет назад

Security update for PackageKit

EPSS

Процентиль: 28%

0.00102

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-209