CVE-2015-1870

Published June 26th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

2.1

LOW

Affected

PROJECTS

Description

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

abrt/abrt

Automatic bug detection and reporting tool

GitHub

244

abrt/libreport

Generic library for reporting various problems

GitHub