CVE-2015-1815

CVE-2015-1815 describes a critical command injection vulnerability in the get_rpm_nvr_by_file_path_temporary function within setroubleshoot versions prior to 3.2.22, impacting Fedora and SELinux setroubleshoot products. This flaw allows remote attackers to execute arbitrary commands by injecting shell metacharacters into file names. With a CVSS score of 10.0, it represents a severe threat with complete compromise of confidentiality, integrity, and availability, requiring no authentication or complex attack conditions. While not listed in CISA's KEV catalog and lacking Metasploit or Nuclei modules, an ExploitDB entry (EDB-36564) indicates a local privilege escalation exploit exists, though there is minimal community discussion or media coverage.