CVEvulnerability
CVE-2020-16121
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2020-11-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-209
Description
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Affected configurations
• packagekit project packagekit
• canonical ubuntu linux 20.04
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887 Issue Tracking, Third Party Advisory
- https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html Exploit, Third Party Advisory
- https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887 Issue Tracking, Third Party Advisory
- https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html Exploit, Third Party Advisory