CVE-2015-1870

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-1870
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2015-1083.html Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1210.html
http://www.securityfocus.com/bid/75119 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1212868 Issue Tracking Vendor Advisory
https://github.com/abrt/abrt/commit/7d023c32a565e83306cddf34c894477b7aaf33d1 Patch Third Party Advisory
https://github.com/abrt/abrt/commit/8939398b82006ba1fec4ed491339fc075f43fc7c Patch Third Party Advisory
https://github.com/abrt/libreport/commit/c962918bc70a61a8cc647898ee8b1ff1c14a87c5 Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:automatic_bug_reporting_tool:*:*:*:*:*:*:*:*
History

13 Feb 2023, 00:47

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2015-1870', 'name': 'https://access.redhat.com/security/cve/CVE-2015-1870', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2015:1083', 'name': 'https://access.redhat.com/errata/RHSA-2015:1083', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2015:1210', 'name': 'https://access.redhat.com/errata/RHSA-2015:1210', 'tags': [], 'refsource': 'MISC'}
Summary It was found that the ABRT event scripts created a user-readable copy of an sosreport file in ABRT problem directories, and included excerpts of /var/log/messages selected by the user-controlled process name, leading to an information disclosure. The fix for this issue prevents non-privileged users from accessing any crash reports, even reports of crashes of processes owned by those users. Only administrators (the wheel group members) are allowed to access crash reports via the "System" tab in the ABRT GUI, or by running abrt-cli as root (that is, via "sudo abrt-cli" or "su -c abrt-cli"). The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

02 Feb 2023, 20:20

Type Values Removed Values Added
Summary The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors. It was found that the ABRT event scripts created a user-readable copy of an sosreport file in ABRT problem directories, and included excerpts of /var/log/messages selected by the user-controlled process name, leading to an information disclosure. The fix for this issue prevents non-privileged users from accessing any crash reports, even reports of crashes of processes owned by those users. Only administrators (the wheel group members) are allowed to access crash reports via the "System" tab in the ABRT GUI, or by running abrt-cli as root (that is, via "sudo abrt-cli" or "su -c abrt-cli").
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2015-1870 -
  • (MISC) https://access.redhat.com/errata/RHSA-2015:1083 -
  • (MISC) https://access.redhat.com/errata/RHSA-2015:1210 -
Information

Published : 2017-06-26 15:29

Updated : 2023-12-10 12:15

NVD link : CVE-2015-1870

Mitre link : CVE-2015-1870

CVE.ORG link : CVE-2015-1870

JSON object : View

Products Affected

redhat

  • automatic_bug_reporting_tool
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor