vulnerability

Huawei EulerOS: CVE-2018-1106: PackageKit security update

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
2018-04-23
Added
2019-12-27
Modified
2024-11-27

Description

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

Solution(s)

huawei-euleros-2_0_sp5-upgrade-packagekithuawei-euleros-2_0_sp5-upgrade-packagekit-command-not-foundhuawei-euleros-2_0_sp5-upgrade-packagekit-glibhuawei-euleros-2_0_sp5-upgrade-packagekit-gstreamer-pluginhuawei-euleros-2_0_sp5-upgrade-packagekit-gtk3-modulehuawei-euleros-2_0_sp5-upgrade-packagekit-yum
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.