CVE-2017-15131

Description

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.129

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2018:0842)Low: security and bug fix update xdg-user-dirs-debuginfo-0.15-5.el7.x86_64.rpm	Linux
xdg-user-dirs Security Update (ALAS-2018-1030) xdg-user-dirs-0.15-5.amzn2.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234