CVE-2015-3151

Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.

• CWE-22

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151Issue Tracking, Third Party Advisory
• https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5bPatch, Third Party Advisory
• https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277Patch, Third Party Advisory
• https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151Issue Tracking, Third Party Advisory
• https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5bPatch, Third Party Advisory
• https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277Patch, Third Party Advisory
• https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364Patch, Third Party Advisory

Published

Jan 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3145The sanitize_cookie_path function in cURL and libcurl 7.31.0…
• CVE-2015-3146The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet h…
• CVE-2015-3147daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool…6.5
• CVE-2015-3148cURL and libcurl 7.10.6 through 7.41.0 do not properly re-us…
• CVE-2015-3149The Hotspot component in OpenJDK8 as packaged in Red Hat Ent…
• CVE-2015-3150abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows loca…7.1
• CVE-2015-3152Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka lib…5.9
• CVE-2015-3153The default configuration for cURL and libcurl before 7.42.1…
• CVE-2015-3154CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zen…6.1
• CVE-2015-3155Foreman before 1.8.1 does not set the secure flag for the _s…
• CVE-2015-3156The _write_config function in trove/guestagent/datastore/exp…
• CVE-2015-3157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…