CVE-2015-3147 Path traversal in ABRT
Local attackers can exploit symlink vulnerabilities in ABRT to write to arbitrary files, potentially compromising system integrity.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-3147?
CVE-2015-3147 is a medium-severity path traversal vulnerability in Redhat Enterprise Linux Desktop, published on 14 Jan 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt.
Weakness: CWE-59
Which versions are affected by CVE-2015-3147?
It affects 7 products.
Products include Redhat Automatic Bug Reporting Tool, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Server Tus and 1 more.
How do I fix CVE-2015-3147?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2015-3147 being exploited?
There is no known exploitation of CVE-2015-3147 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Desktop
Sources
Also known as GHSA-hw2r-7jp6-9r7m.