CVE-2015-1327
Published: Apr 22, 2019
Modified: Sep 16, 2024
CVSS v3.0
3.9
Description
Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.
| Vendor | Product | Versions |
|---|---|---|
Ubuntu | Content Hub | affected unspecified - < 0.0+15.04.20150331-0ubuntu1.0 |
CVSS v3.0 Details
CVSS v3.0 Vector
CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now