Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15131

Опубликовано: 09 янв. 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:freedesktop:xdg-user-dirs:*:*:*:*:*:*:*:*
Версия до 0.15.5 (исключая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.00129
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-284
CWE-276

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 8 лет назад

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

CVSS3: 3.3
redhat
почти 9 лет назад

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

CVSS3: 7.8
debian
почти 8 лет назад

It was found that system umask policy is not being honored when creati ...

CVSS3: 7.8
github
больше 3 лет назад

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

oracle-oval
больше 7 лет назад

ELSA-2018-0842: xdg-user-dirs security and bug fix update (LOW)

EPSS

Процентиль: 33%
0.00129
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-284
CWE-276