Lucene search
Veracode Vulnerability DatabaseVERACODE:13673HistoryApr 23, 2019 - 6:26 a.m.
Authentication Bypass
2019-04-2306:26:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
43.0%
github.com/snapcore/snapweb is vulnerable to authentication bypass. The identity of the user and the origin of a connection is not verified before allowing controls to install or remove snap packages. An unauthenticated remote attacker is able to add a malicious snap package from the store and use system resources without any privileges.
Related
osv
osv
CVE-2016-1587
2019-04-22 16:29:01
cve
cve
CVE-2016-1587
2019-04-22 16:29:01
ubuntucve
ubuntucve
CVE-2016-1587
2016-10-27 00:00:00
nvd
nvd
CVE-2016-1587
2019-04-22 16:29:01
cvelist
cvelist
CVE-2016-1587
2016-10-27 00:00:00
prion
prion
Information disclosure
2019-04-22 16:29:00