Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-16121
HistorySep 24, 2020 - 12:00 a.m.

CVE-2020-16121

2020-09-2400:00:00
ubuntu.com
ubuntu.com
9

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

12.9%

PackageKit provided detailed error messages to unprivileged callers that
exposed information about file presence and mimetype of files that the user
would be unable to determine on its own.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchpackagekit< 1.1.9-1ubuntu2.18.04.6UNKNOWN
ubuntu20.04noarchpackagekit< 1.1.13-2ubuntu1.1UNKNOWN
ubuntu16.04noarchpackagekit< 0.8.17-4ubuntu6~gcc5.4ubuntu1.5UNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

12.9%