CVE-2020-16122

Katalog CVE

CVSS 7.8 · High EPSS 0,34%

Kerentanan Improper Privilege Management pada packagekit project packagekit, canonical ubuntu linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages.

Rincian

Terbit di NVD

7 November 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1882098 issue tracking · advisory pihak ketiga