Security Advisory

CVE-2015-1870

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-26 15:00:00
Last updated 2024-08-06 04:54:16
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.