CVE-2018-1106 - AskarLabs CVE Database

CVE-2018-1106

Vendor Red Hat, Inc.

Product PackageKit

Weakness CWE-287 · Improper authentication

Published April 23, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system.

Key dates

02Disclosure timeline

April 23, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-1106 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2025-30361 WeGIA Vulnerable to Broken Authentication - Old Password Validation CVE-2026-21854 Tarkov Data Manager Authentication Bypass vulnerability CVE-2026-24241 CVE-2026-40344 MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads CVE-2026-12112 Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse