Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-0987

Опубликовано: 28 июн. 2022
Источник: nvd
CVSS3: 3.3
CVSS2: 2.1
EPSS Низкий

Описание

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:packagekit_project:packagekit:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 12%
0.00041
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
redhat
почти 4 года назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 3.3
debian
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed ...

CVSS3: 3.3
github
больше 3 лет назад

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure the time the methods take to execute and know whether a file owned by root or other users exists.

CVSS3: 5.5
fstec
почти 4 года назад

Уязвимость интерфейса транзакций пакетного менеджера PackageKit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 12%
0.00041
Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200
NVD-CWE-noinfo