Description (CNA)
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PackageKit / PackageKit | affected 1.1.13-2ubuntu before 1.1.13-2ubuntu1.1; affected 1.1.9-1ubuntu2 before 1.1.9-1ubuntu2.18.04.6; affected 0.8.17-4ubuntu6 before 0.8.17-4ubuntu6~gcc5.4ubuntu1.5 |
CWE
CWE-209
References
- https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
- https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887
ADP enrichment
No English description supplied.