CVE-2015-3150

Katalog CVE

CVSS 7.1 · High EPSS 0,40%

Kerentanan Improper Input Validation pada redhat automatic bug reporting tool. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.

Rincian

Terbit di NVD

14 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8 patch · advisory pihak ketiga
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1 patch · advisory pihak ketiga
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7 patch · advisory pihak ketiga
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75 patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1214457 issue tracking · advisory pihak ketiga