Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade abrt-addon-pstoreoopsUpgrade abrt-addon-kerneloopsUpgrade libreport-plugin-kerneloopsUpgrade abrt-cliUpgrade abrt-gui-develUpgrade abrt-dbusUpgrade libreport-gtkUpgrade libreport-webUpgrade libreport-gtk-develUpgrade libreport-plugin-rhtsupportUpgrade abrt-addon-ccppUpgrade libreport-cliUpgrade abrt-pythonUpgrade libreport-centosUpgrade abrt-addon-xorgUpgrade libreport-rhelUpgrade libreportUpgrade libreport-plugin-mailxUpgrade abrt-develUpgrade libreport-compatUpgrade abrt-python-docUpgrade abrt-libsUpgrade abrt-desktopUpgrade libreport-rhel-bugzillaUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-plugin-loggerUpgrade libreport-plugin-reportuploaderUpgrade abrt-tuiUpgrade abrt-addon-vmcoreUpgrade abrt-addon-pythonUpgrade libreport-newtUpgrade libreport-plugin-ureportUpgrade abrt-retrace-clientUpgrade abrt-console-notificationUpgrade libreport-pythonUpgrade libreport-plugin-bugzillaUpgrade abrt-guiUpgrade abrt-gui-libsUpgrade libreport-plugin-mantisbtUpgrade libreport-filesystemUpgrade abrt-addon-upload-watchUpgrade abrtUpgrade libreport-anacondaUpgrade libreport-web-develUpgrade libreport-devel | Aug 17, 2018 | Jun 15, 2015 |
| Oracle_linux | — | Upgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-guiUpgrade abrt-python-docUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-vmcoreUpgrade libreport-gtk-develUpgrade libreport-plugin-mailxUpgrade libreport-cliUpgrade libreport-newtUpgrade abrt-pythonUpgrade libreport-gtkUpgrade abrt-console-notificationUpgrade libreport-webUpgrade libreport-plugin-ureportUpgrade abrt-gui-develUpgrade abrtUpgrade libreport-pythonUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-loggerUpgrade abrt-tuiUpgrade libreport-anacondaUpgrade abrt-gui-libsUpgrade abrt-libsUpgrade abrt-addon-xorgUpgrade abrt-retrace-clientUpgrade abrt-dbusUpgrade libreport-web-develUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pythonUpgrade libreport-compatUpgrade libreportUpgrade abrt-cliUpgrade abrt-addon-pstoreoopsUpgrade abrt-desktopUpgrade abrt-addon-ccppUpgrade abrt-develUpgrade libreport-develUpgrade libreport-filesystemUpgrade libreport-plugin-bugzillaUpgrade abrt-addon-kerneloops | Oct 16, 2024 | Jan 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub