title: PackageKit error messages leak presence and mimetype of files to unprivileged users
description: PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
problem types: CWE-209 Information Exposure Through an Error Message
affected:
{
product: PackageKit
vendor: PackageKit
versions:
lessThan:  1.1.13-2ubuntu1.1, status: affected, version: 1.1.13-2ubuntu, versionType: custom
lessThan: 1.1.9-1ubuntu2.18.04.6, status: affected, version: 1.1.9-1ubuntu2, versionType: custom
lessThan: 0.8.17-4ubuntu6~gcc5.4ubuntu1.5, status: affected, version: 0.8.17-4ubuntu6, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
]