CVE-2020-15709 Information
Feb 14, 2021
cve
Description
Versions of add-apt-repository before 0.98.9.2 0.96.24.32.14 0.96.20.10 and 0.92.37.8ubuntu0.1~esm1 printed a PPA (personal package archive) description to the terminal as-is which allowed PPA owners to provide ANSI terminal escapes to modify terminal contents in unexpected ways.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Reference
Attack Complexity
LOW
Privileges Required
LOW
User Interaction Required
LOW
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
NONE
Base Severity
5.5
Share on: