VULNERABILITY INTELLIGENCE

CVE-2015-5287

CVSS score7.8 HIGH
EPSS probability5.00%
CISA KEVKnown exploited vulnerability
Published2015-12-07
Last modified2026-08-27
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Vendor / product: Red Hat / Automatic Bug Reporting Tool

Description

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references