CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 2.1
CWE Name:  Improper Authentication
Summary: an authentication bypass flaw has been found in packagekit before 1.1.10 that allows users without administrator privileges to install signed packages. a local attacker can use this vulnerability to install vulnerable packages to further compromise a system.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-04-23
Last Modified Date: 2019-10-09