CVE-2020-15703

🗓️ 24 Sep 2020 00:00:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 17 Views

There is a vulnerability in aptd where an unprivileged user can read any file on the system as roo

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2020-15703	28 Oct 202013:20	–	circl
CVE	CVE-2020-15703	31 Oct 202003:45	–	cve
Cvelist	CVE-2020-15703 aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property	31 Oct 202003:45	–	cvelist
EUVD	EUVD-2022-5615	3 Oct 202520:07	–	euvd
Github Security Blog	aptdaemon Information Disclosure via Improper Input Validation in Transaction class	24 May 202217:32	–	github
NVD	CVE-2020-15703	31 Oct 202004:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-4537-1)	25 Sep 202000:00	–	openvas
OSV	GHSA-WPMR-Q825-X4C6 aptdaemon Information Disclosure via Improper Input Validation in Transaction class	24 May 202217:32	–	osv
OSV	UBUNTU-CVE-2020-15703	24 Sep 202000:00	–	osv
OSV	USN-4537-1 aptdaemon vulnerability	24 Sep 202012:52	–	osv

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	18.04	any	aptdaemon	1.1.1+bzr982-0ubuntu19.4	aptdaemon_1.1.1+bzr982-0ubuntu19.4_any.deb
Ubuntu	20.04	any	aptdaemon	1.1.1+bzr982-0ubuntu32.2	aptdaemon_1.1.1+bzr982-0ubuntu32.2_any.deb
Ubuntu	16.04	any	aptdaemon	1.1.1+bzr982-0ubuntu14.4	aptdaemon_1.1.1+bzr982-0ubuntu14.4_any.deb

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-4537-1
eyecontrol	www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
cve	www.cve.org/CVERecord

25 Aug 2025 23:21Current

5.8Medium risk

Vulners AI Score5.8

CVSS 22.1

CVSS 3.13.3 - 4

EPSS0.0048

cve-2020-15703 input validation locale property apt transaction unprivileged user writable directory symlink file existence bugs unix