Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0987

Опубликовано: 28 июн. 2022
Источник: nvd
CVSS3: 3.3
CVSS2: 2.1
EPSS Низкий

Описание

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:packagekit_project:packagekit:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%
0.00263
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 4 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
redhat
больше 4 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
debian
около 4 лет назад

A flaw was found in PackageKit in the way some of the methods exposed ...

CVSS3: 3.3
github
около 4 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 5.5
fstec
больше 4 лет назад

Уязвимость интерфейса транзакций пакетного менеджера PackageKit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 18%
0.00263
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo