Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2015-3150

Date: January 14, 2020

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.

Language: C

Severity Score

Related Resources (8)

https://bugzilla.redhat.com/show_bug.cgi?id=1214457
https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8
https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75
https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7
https://access.redhat.com/security/cve/CVE-2015-3150
https://nvd.nist.gov/vuln/detail/CVE-2015-3150
https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1
https://www.mend.io/vulnerability-database/CVE-2015-3150

Severity Score

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): COMPLETE
Integrity (I): COMPLETE
Availability (A): COMPLETE
Additional information:

Do you need more information?

Contact Us