
Find real vulnerabilities before they ship
Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.
| Base Score | 6.2 |
|---|---|
| Vector String | AV:L/AC:H/Au:N/C:C/I:C/A:C |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |