Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libreport-webUpgrade abrt-develUpgrade abrt-addon-xorgUpgrade abrt-addon-pstoreoopsUpgrade abrt-dbusUpgrade libreport-cliUpgrade libreport-plugin-kerneloopsUpgrade abrt-python-docUpgrade libreport-plugin-mailxUpgrade abrt-libsUpgrade abrt-gui-develUpgrade libreportUpgrade abrt-addon-ccppUpgrade abrt-pythonUpgrade libreport-rhelUpgrade abrt-addon-kerneloopsUpgrade libreport-compatUpgrade abrt-cliUpgrade libreport-centosUpgrade libreport-gtk-develUpgrade libreport-gtkUpgrade libreport-plugin-rhtsupportUpgrade abrt-desktopUpgrade libreport-plugin-bugzillaUpgrade libreport-pythonUpgrade abrt-addon-pythonUpgrade libreport-develUpgrade libreport-newtUpgrade abrt-gui-libsUpgrade abrt-addon-upload-watchUpgrade libreport-rhel-bugzillaUpgrade abrt-addon-vmcoreUpgrade libreport-plugin-reportuploaderUpgrade abrt-tuiUpgrade abrt-guiUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-filesystemUpgrade abrt-console-notificationUpgrade libreport-web-develUpgrade libreport-anacondaUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-ureportUpgrade libreport-plugin-loggerUpgrade abrt-retrace-clientUpgrade abrt | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade abrt-addon-ccppUpgrade abrt-addon-pstoreoopsUpgrade abrtUpgrade abrt-addon-kerneloopsUpgrade abrt-tuiUpgrade libreport-plugin-kerneloopsUpgrade libreportUpgrade abrt-addon-pythonUpgrade abrt-gui-develUpgrade libreport-filesystemUpgrade abrt-addon-xorgUpgrade abrt-desktopUpgrade abrt-cliUpgrade libreport-compatUpgrade libreport-plugin-bugzillaUpgrade libreport-plugin-ureportUpgrade abrt-retrace-clientUpgrade abrt-develUpgrade libreport-rhel-bugzillaUpgrade abrt-libsUpgrade libreport-develUpgrade libreport-plugin-loggerUpgrade libreport-web-develUpgrade abrt-dbusUpgrade libreport-pythonUpgrade abrt-gui-libsUpgrade libreport-anacondaUpgrade libreport-newtUpgrade abrt-guiUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-upload-watchUpgrade abrt-addon-vmcoreUpgrade libreport-gtkUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-gtk-develUpgrade libreport-webUpgrade libreport-plugin-mailxUpgrade abrt-console-notificationUpgrade libreport-cliUpgrade abrt-python-docUpgrade abrt-python | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub