CVE-2015-5302

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information…

published December 7, 2015

CVSS
—
EPSS
3%
Percentile
86.4
In the wild
Unconfirmed
What it is

libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information via unspecified vectors related to the (1) backtrace, (2) cmdline, (3) environ, (4) open_fds, (5) maps, (6) smaps, (7) hostname, (8) remote, (9) ks.cfg, or (10) anaconda-tb file attachment included in a Red Hat Bugzilla bug report.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02823 · 86.4th percentile
Published
2015-12-07T18:00Z
EPSS history
Timeline
  • 07 DEC 18:00Z
    libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attackers to obtain sensitive information…
    cvelistv5