vulnerability
Huawei EulerOS: CVE-2018-1106: PackageKit security update
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
2 | (AV:L/AC:L/Au:N/C:N/I:P/A:N) | 2018-04-23 | 2019-12-27 | 2024-11-27 |
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
2018-04-23
Added
2019-12-27
Modified
2024-11-27
Description
An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.
Solution(s)
huawei-euleros-2_0_sp5-upgrade-packagekithuawei-euleros-2_0_sp5-upgrade-packagekit-command-not-foundhuawei-euleros-2_0_sp5-upgrade-packagekit-glibhuawei-euleros-2_0_sp5-upgrade-packagekit-gstreamer-pluginhuawei-euleros-2_0_sp5-upgrade-packagekit-gtk3-modulehuawei-euleros-2_0_sp5-upgrade-packagekit-yum

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.