CVE-2015-3151: Path Traversal
First published: Tue Jan 14 2020(Updated: )
Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Automatic Bug Reporting Tool |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151
- https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3
- https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
- https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
- https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
- https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364
Frequently Asked Questions
What is CVE-2015-3151?
CVE-2015-3151 is a directory traversal vulnerability in the Automatic Bug Reporting Tool (ABRT) that allows local users to read, write to, or change ownership of arbitrary files.
How does CVE-2015-3151 affect Redhat Automatic Bug Reporting Tool?
CVE-2015-3151 affects Redhat Automatic Bug Reporting Tool, allowing local users to exploit the vulnerability and gain unauthorized access to files.
What is the severity of CVE-2015-3151?
CVE-2015-3151 has a severity rating of 7.8 (High).
How can I fix CVE-2015-3151?
To fix CVE-2015-3151, it is recommended to update to the latest version of the Automatic Bug Reporting Tool (ABRT) that includes the necessary patches and security updates.
What is CWE-22?
CWE-22 refers to the category of path traversal/relativd path traversal vulnerabilities, which includes CVE-2015-3151.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/redhat
- canonical/redhat automatic bug reporting tool