Name: CVE-2015-1870: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2017-06-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2015-1870, CWE-200, CVSS 5.5, EPSS 0.00101

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

CVSS Details

CVSS 3.0 Base Score: 5.5
CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-rhtsupportUpgrade libreport-gtkUpgrade abrt-desktopUpgrade abrt-addon-kerneloopsUpgrade abrt-develUpgrade abrt-pythonUpgrade abrt-addon-xorgUpgrade libreport-gtk-develUpgrade libreport-plugin-mailxUpgrade libreport-centosUpgrade abrt-python-docUpgrade abrt-gui-develUpgrade abrt-guiUpgrade abrt-dbusUpgrade libreport-cliUpgrade abrt-libsUpgrade libreportUpgrade abrt-cliUpgrade abrt-addon-pythonUpgrade libreport-web-develUpgrade libreport-webUpgrade abrt-addon-ccppUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-loggerUpgrade abrt-console-notificationUpgrade libreport-rhelUpgrade abrt-tuiUpgrade abrt-retrace-clientUpgrade abrtUpgrade libreport-filesystemUpgrade libreport-plugin-bugzillaUpgrade libreport-anacondaUpgrade libreport-newtUpgrade libreport-develUpgrade abrt-addon-vmcoreUpgrade libreport-compatUpgrade abrt-gui-libsUpgrade libreport-plugin-mantisbtUpgrade libreport-plugin-ureportUpgrade libreport-plugin-reportuploaderUpgrade libreport-pythonUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-rhel-bugzilla	Aug 17, 2018	Jun 15, 2015
Oracle_linux	—	Upgrade abrt-cliUpgrade abrt-addon-kerneloopsUpgrade abrt-dbusUpgrade abrt-guiUpgrade abrt-tuiUpgrade libreport-rhel-bugzillaUpgrade libreport-plugin-mailxUpgrade libreport-web-develUpgrade abrt-gui-libsUpgrade abrtUpgrade libreport-develUpgrade abrt-addon-xorgUpgrade abrt-pythonUpgrade abrt-addon-pythonUpgrade libreport-gtk-develUpgrade libreport-filesystemUpgrade libreport-gtkUpgrade libreport-plugin-loggerUpgrade abrt-addon-vmcoreUpgrade abrt-gui-develUpgrade libreport-compatUpgrade libreport-cliUpgrade libreport-pythonUpgrade abrt-python-docUpgrade libreport-rhel-anaconda-bugzillaUpgrade abrt-addon-ccppUpgrade libreport-newtUpgrade libreport-plugin-bugzillaUpgrade abrt-develUpgrade abrt-libsUpgrade libreport-plugin-ureportUpgrade libreport-plugin-reportuploaderUpgrade libreportUpgrade abrt-retrace-clientUpgrade libreport-webUpgrade libreport-anacondaUpgrade abrt-console-notificationUpgrade abrt-addon-upload-watchUpgrade libreport-plugin-kerneloopsUpgrade abrt-addon-pstoreoopsUpgrade abrt-desktop	Oct 16, 2024	Jun 26, 2017

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence