CVE catalog
CVE-2015-5287
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable nam
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- Exploitation
- CISA Known Exploited Vulnerabilities
- EPSS
- 5.00% · Oct 27, 2026
Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | automatic_bug_reporting_tool | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_desktop | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_hpc_node | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_server | Not reported | Not reported | unknown |
| Cpe | enterprise_linux_workstation | Not reported | Not reported | unknown |
| Cpe | linux | Not reported | Not reported | unknown |
| Cpe | enterprise_linux | Not reported | Not reported | unknown |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2015_2505.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2015-5287]
- [https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-5287.json]
- [https://www.cisa.gov/known-exploited-vulnerabilities-catalog]
[CISA Known Exploited Vulnerabilities (OSINT)] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]