CVE-2020-27349 aptdaemon performed policykit permissions checks too late

2020-12-0903:35:17

CWE-862

canonical

www.cve.org

cve-2020-27349

aptdaemon

policykit

permissions

issue

untrusted files

elevated privileges

AI Score

5.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.

CNA Affected

[
  {
    "product": "aptdaemon",
    "vendor": "Canonical",
    "versions": [
      {
        "lessThan": "1.1.1+bzr982-0ubuntu14.5",
        "status": "affected",
        "version": "1.1.1+bzr982-0ubuntu14",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.1+bzr982-0ubuntu19.5",
        "status": "affected",
        "version": "1.1.1+bzr982-0ubuntu19",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.1+bzr982-0ubuntu32.3",
        "status": "affected",
        "version": "1.1.1+bzr982-0ubuntu32",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.1+bzr982-0ubuntu34.1",
        "status": "affected",
        "version": "1.1.1+bzr982-0ubuntu34",
        "versionType": "custom"
      }
    ]
  }
]