Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: PackageKit Clear all filters
TI-2022-00886 CVE-2022-0987 · GHSA-cxr3-mmp5-f58q

Information disclosure in PackageKit

Priority LOW 16

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00263 Published 2022-06-28 No fix listed CWE-200
TI-2020-12680 CVE-2020-16121 · GHSA-6g23-6jw5-9vrf

PackageKit error messages leak presence and mimetype of files to unprivileged users

Priority LOW 16

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00468 Published 2020-11-07 Partial fix · 1.1.13-2ubuntu1.1, 1.1.9-1ubuntu2.18.04.6 +1 CWE-209
TI-2011-02207 CVE-2011-2515 · GHSA-wvrq-v7hr-q8xr

Incorrect permission assignment in packagekit

Priority LOW 24

PackageKit 0.6.17 allows installation of unsigned RPM packages as though they were signed which may allow installation of non-trusted packages and execution of arbitrary code.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00393 Published 2019-11-27 Will not fix CWE-732
TI-2018-01024 CVE-2018-1106 · GHSA-9pvg-w7xf-pgq7

Improper authentication in Red Hat PackageKit

Priority LOW 25

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00379 Published 2018-04-23 Fixed in 1.1.10 CWE-287