CVE-2015-1870

MEDIUM 5.5CVE-2015-1870 · Published 26/06/2017 · updated 17/06/2026

In short

CVE-2015-1870 is a MEDIUM (CVSS 5.5) vulnerability affecting automatic bug reporting tool (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
automatic bug reporting tool redhat	`≤ 2.1.11`	No fix yet

Description

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

References

rhn.redhat.com/errata/RHSA-2015-1083.html · Vendor Advisory
rhn.redhat.com/errata/RHSA-2015-1210.html
securityfocus.com/bid/75119 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
abrt/abrt commit 7d023c3 · Patch
abrt/abrt commit 8939398 · Patch
abrt/libreport commit c962918 · Patch

More vulnerabilities in automatic bug reporting tool

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

automatic bug reporting tool

redhat

≤ 2.1.11

No fix yet

More vulnerabilities in automatic bug reporting tool

See all →