CVE-2020-16128CWE-209

Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties

Low · published December 9, 2020

CVSS v3.1
3.8
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00339 · 26.1th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2020-12-09T03:35Z
EPSS history
Timeline
  • 09 DEC 03:35Z
    Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties
    cvelistv5