CVE-2018-1106CWE-287

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages

published April 23, 2018

CVSS
—
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2018-04-23T20:00Z
EPSS history
Timeline
  • 23 APR 20:00Z
    An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages
    cvelistv5