Description
The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/75728
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1443-1
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49230
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/82020
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53605
Scores
EPSS
0.0212
EPSS Percentile
79.7%
Details
CWE
CWE-200
Status
published
Products (3)
canonical/ubuntu_linux
11.04
canonical/ubuntu_linux
11.10
canonical/ubuntu_linux
12.04
Published
May 31, 2012
Tracked Since
Feb 18, 2026