PT-2017-6533 · Red Hat+1 · Abrt+2

Florian Weimer

·

CVE-2015-1870

·

Publicado

2015-06-09

·

Atualizado

2023-02-13

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Automatic Bug Reporting Tool (ABRT) (affected versions not specified)
Description The issue concerns the event scripts in ABRT, which use world-readable permission on a copy of the sosreport file in problem directories. This allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CESA-2015_1083
CVE-2015-1870
RHSA-2015:1083
RHSA-2015:1210
RHSA-2015_1083
RHSA-2015_1210

Produtos afetados

Abrt
Centos
Red Hat