Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2015-3151

20
FAUCET Score

CVE-2015-3151 is a directory traversal vulnerability in the abrt-dbus component of Red Hat's Automatic Bug Reporting Tool (ABRT). This flaw allows local attackers to read, write, or change ownership of arbitrary files by manipulating unspecified vectors within the NewProblem, GetInfo, SetElement, or DeleteElement methods. With a CVSS score of 7.8 (High), the vulnerability has a low attack complexity and requires local access, but can lead to high impact on confidentiality, integrity, and availability. There is no public exploit code available, it is not listed in the KEV catalog, and it has garnered minimal community discussion or media coverage, suggesting it is not actively exploited.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.56%
Probability of exploitation in next 30 days
EPSS Percentile
43.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0056 is in the 82nd percentile among its peer group of 16,985 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: abrt-0:2.1.11-22.el7_1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: libreport-0:2.1.11-23.el7_1
View patch

Vendor Advisories (1)

redhatCVE-2015-3151Important

abrt: directory traversals in several D-Bus methods implemented by abrt-dbus

Apr 22, 2015

References

bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
github.com / abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3
PatchThird Party Advisory
github.com / abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
PatchThird Party Advisory
github.com / abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
PatchThird Party Advisory
github.com / abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
PatchThird Party Advisory
github.com / abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364
PatchThird Party Advisory