CVE-2016-1587

The CVE concerns the Snapweb interface prior to version 0.21.2, where controls to install or remove snap packages did not verify the user’s identity or the connection’s origin. This allowed an attacker to remotely add a valid yet malicious snap package from the Store and potentially consume syste...