Find real vulnerabilities before they ship
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
Base Score
3.3
| Base Score | 3.3 |
|---|---|
| Vector String | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Base Severity | Low |
| Version | 3.1 |
| Attack Vector (AV) | LOCAL |
