CVE-2017-15131CWE-284
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask…
published January 9, 2018
What it is
It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00321 · 23.9th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2018-01-09T21:00Z
EPSS history
Timeline