VULNERABILITY INTELLIGENCE
CVE-2015-3150
CVSS score7.1 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2020-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- secalert@redhat.com — Issue Tracking, Third Party Advisory
- secalert@redhat.com — Patch, Third Party Advisory
- secalert@redhat.com — Patch, Third Party Advisory
- secalert@redhat.com — Patch, Third Party Advisory
- secalert@redhat.com — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory