CVE-2015-1870

published 2017-06-26

CVE-2015-1870: The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local…

medium 5.5 CVSS 3.0

AV L AC L PR L UI N S U C H I N A N

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
redhat	automatic_bug_reporting_tool	<= 2.1.11	—

CWE-200