CVE-2020-16121

Опубликовано: 07 нояб. 2020

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

Ссылки

https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887
Issue Tracking
Third Party Advisory
https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Exploit
Third Party Advisory
https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887
Issue Tracking
Third Party Advisory
https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:packagekit_project:packagekit:-:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 39%

0.00468

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-209

Связанные уязвимости

CVE-2020-16121

CVSS3: 3.3

ubuntu

почти 6 лет назад

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CVE-2020-16121

CVSS3: 2.5

redhat

почти 6 лет назад

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CVE-2020-16121

CVSS3: 3.3

debian

почти 6 лет назад

PackageKit provided detailed error messages to unprivileged callers th ...

openSUSE-SU-2020:2344-1

suse-cvrf

больше 5 лет назад

Security update for PackageKit

openSUSE-SU-2020:2292-1

suse-cvrf

больше 5 лет назад

Security update for PackageKit

EPSS

Процентиль: 39%

0.00468

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-209