CVE-2010-0750 — Sensitive Information Exposure in Policykit

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 75.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Freedesktop PolicykitDebian Policykit-1
Timeline
PublishedApr 6
Latest updateMay 2

Description

pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: bugs.freedesktop.org ↗Patch: cgit.freedesktop.org ↗Patch: bugs.freedesktop.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-mjg5-5qf3-5mwg: pkexec↗2022-05-02
▶

📋Vendor Advisories

1
Debian
CVE-2010-0750: policykit-1 - pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determin...↗2010
▶