CVE Details

CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Published: 2026-08-26 CVSS: 7.8 HIGH Product: Red Hat Automatic Bug Reporting Tool Due Date: 2026-09-09

Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

GitHub PoC

Warning: GitHub PoC repositories are unverified. Some may be fake or contain malware. Use caution and review code before running anything.

No GitHub PoC data.

FIRST EPSS

EPSS estimates the probability of exploitation in the next 30 days. Higher values indicate higher likelihood of real-world exploitation.

Timeline

CVE Stalker KEV MITRE GitHub FIRST (EPSS)

MITRE

CVSS

  • Score: 7.8
  • Severity: HIGH
  • Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

  • Exploitation: active
  • Automatable: no
  • Technical Impact: total

References

Show Raw Data
Key Remaining Key Value
containers > cna > affected > 0 > product n/a
containers > cna > affected > 0 > vendor n/a
containers > cna > affected > 0 > versions > 0 > status affected
containers > cna > affected > 0 > versions > 0 > version n/a
containers > cna > datePublic 2015-11-23T00:00:00.000Z
containers > cna > descriptions > 0 > lang en
containers > cna > descriptions > 0 > value The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
containers > cna > problemTypes > 0 > descriptions > 0 > description n/a
containers > cna > problemTypes > 0 > descriptions > 0 > lang en
containers > cna > problemTypes > 0 > descriptions > 0 > type text
containers > cna > providerMetadata > dateUpdated 2019-09-24T18:06:16.000Z
containers > cna > providerMetadata > orgId 53f830b8-0a3f-465b-8143-3b8a9948e749
containers > cna > providerMetadata > shortName redhat
containers > cna > references > 0 > name RHSA-2015:2505
containers > cna > references > 0 > tags > 0 vendor-advisory
containers > cna > references > 0 > tags > 1 x_refsource_REDHAT
containers > cna > references > 0 > url http://rhn.redhat.com/errata/RHSA-2015-2505.html
containers > cna > references > 1 > name 38832
containers > cna > references > 1 > tags > 0 exploit
containers > cna > references > 1 > tags > 1 x_refsource_EXPLOIT-DB
containers > cna > references > 1 > url https://www.exploit-db.com/exploits/38832/
containers > cna > references > 2 > name [oss-security] 20151201 CVE-2015-5273 + CVE-2015-5287, abrt local root in Centos/Fedora/RHEL
containers > cna > references > 2 > tags > 0 mailing-list
containers > cna > references > 2 > tags > 1 x_refsource_MLIST
containers > cna > references > 2 > url http://www.openwall.com/lists/oss-security/2015/12/01/1
containers > cna > references > 3 > tags > 0 x_refsource_CONFIRM
containers > cna > references > 3 > url http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
containers > cna > references > 4 > tags > 0 x_refsource_CONFIRM
containers > cna > references > 4 > url https://bugzilla.redhat.com/show_bug.cgi?id=1266837
containers > cna > references > 5 > name 78137
containers > cna > references > 5 > tags > 0 vdb-entry
containers > cna > references > 5 > tags > 1 x_refsource_BID
containers > cna > references > 5 > url http://www.securityfocus.com/bid/78137
containers > cna > references > 6 > tags > 0 x_refsource_CONFIRM
containers > cna > references > 6 > url https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e
containers > cna > references > 7 > tags > 0 x_refsource_MISC
containers > cna > references > 7 > url http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html
containers > adp > 0 > providerMetadata > orgId af854a3a-2127-422b-91ae-364da2661108
containers > adp > 0 > providerMetadata > shortName CVE
containers > adp > 0 > providerMetadata > dateUpdated 2024-08-06T06:41:09.524Z
containers > adp > 0 > title CVE Program Container
containers > adp > 0 > references > 0 > name RHSA-2015:2505
containers > adp > 0 > references > 0 > tags > 0 vendor-advisory
containers > adp > 0 > references > 0 > tags > 1 x_refsource_REDHAT
containers > adp > 0 > references > 0 > tags > 2 x_transferred
containers > adp > 0 > references > 0 > url http://rhn.redhat.com/errata/RHSA-2015-2505.html
containers > adp > 0 > references > 1 > name 38832
containers > adp > 0 > references > 1 > tags > 0 exploit
containers > adp > 0 > references > 1 > tags > 1 x_refsource_EXPLOIT-DB
containers > adp > 0 > references > 1 > tags > 2 x_transferred
containers > adp > 0 > references > 1 > url https://www.exploit-db.com/exploits/38832/
containers > adp > 0 > references > 2 > name [oss-security] 20151201 CVE-2015-5273 + CVE-2015-5287, abrt local root in Centos/Fedora/RHEL
containers > adp > 0 > references > 2 > tags > 0 mailing-list
containers > adp > 0 > references > 2 > tags > 1 x_refsource_MLIST
containers > adp > 0 > references > 2 > tags > 2 x_transferred
containers > adp > 0 > references > 2 > url http://www.openwall.com/lists/oss-security/2015/12/01/1
containers > adp > 0 > references > 3 > tags > 0 x_refsource_CONFIRM
containers > adp > 0 > references > 3 > tags > 1 x_transferred
containers > adp > 0 > references > 3 > url http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
containers > adp > 0 > references > 4 > tags > 0 x_refsource_CONFIRM
containers > adp > 0 > references > 4 > tags > 1 x_transferred
containers > adp > 0 > references > 4 > url https://bugzilla.redhat.com/show_bug.cgi?id=1266837
containers > adp > 0 > references > 5 > name 78137
containers > adp > 0 > references > 5 > tags > 0 vdb-entry
containers > adp > 0 > references > 5 > tags > 1 x_refsource_BID
containers > adp > 0 > references > 5 > tags > 2 x_transferred
containers > adp > 0 > references > 5 > url http://www.securityfocus.com/bid/78137
containers > adp > 0 > references > 6 > tags > 0 x_refsource_CONFIRM
containers > adp > 0 > references > 6 > tags > 1 x_transferred
containers > adp > 0 > references > 6 > url https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e
containers > adp > 0 > references > 7 > tags > 0 x_refsource_MISC
containers > adp > 0 > references > 7 > tags > 1 x_transferred
containers > adp > 0 > references > 7 > url http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html
containers > adp > 1 > metrics > 0 > cvssV3_1 > scope UNCHANGED
containers > adp > 1 > metrics > 0 > cvssV3_1 > version 3.1
containers > adp > 1 > metrics > 0 > cvssV3_1 > baseScore 7.8
containers > adp > 1 > metrics > 0 > cvssV3_1 > attackVector LOCAL
containers > adp > 1 > metrics > 0 > cvssV3_1 > baseSeverity HIGH
containers > adp > 1 > metrics > 0 > cvssV3_1 > vectorString CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
containers > adp > 1 > metrics > 0 > cvssV3_1 > integrityImpact HIGH
containers > adp > 1 > metrics > 0 > cvssV3_1 > userInteraction NONE
containers > adp > 1 > metrics > 0 > cvssV3_1 > attackComplexity LOW
containers > adp > 1 > metrics > 0 > cvssV3_1 > availabilityImpact HIGH
containers > adp > 1 > metrics > 0 > cvssV3_1 > privilegesRequired LOW
containers > adp > 1 > metrics > 0 > cvssV3_1 > confidentialityImpact HIGH
containers > adp > 1 > metrics > 1 > other > type ssvc
containers > adp > 1 > metrics > 1 > other > content > id CVE-2015-5287
containers > adp > 1 > metrics > 1 > other > content > role CISA Coordinator
containers > adp > 1 > metrics > 1 > other > content > options > 0 > Exploitation active
containers > adp > 1 > metrics > 1 > other > content > options > 1 > Automatable no
containers > adp > 1 > metrics > 1 > other > content > options > 2 > Technical Impact total
containers > adp > 1 > metrics > 1 > other > content > version 2.0.3
containers > adp > 1 > metrics > 1 > other > content > timestamp 2026-08-26T17:44:17.462947Z
containers > adp > 1 > references > 0 > url https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/
containers > adp > 1 > references > 0 > tags > 0 third-party-advisory
containers > adp > 1 > references > 1 > url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5287
containers > adp > 1 > references > 1 > tags > 0 government-resource
containers > adp > 1 > problemTypes > 0 > descriptions > 0 > lang en
containers > adp > 1 > problemTypes > 0 > descriptions > 0 > type CWE
containers > adp > 1 > problemTypes > 0 > descriptions > 0 > cweId CWE-59
containers > adp > 1 > problemTypes > 0 > descriptions > 0 > description CWE-59 Improper Link Resolution Before File Access ('Link Following')
containers > adp > 1 > title CISA ADP Vulnrichment
containers > adp > 1 > providerMetadata > orgId 134c704f-9b21-4f2e-91b3-4a467353bcc0
containers > adp > 1 > providerMetadata > shortName CISA-ADP
containers > adp > 1 > providerMetadata > dateUpdated 2026-08-26T17:44:58.533Z
cveMetadata > assignerOrgId 53f830b8-0a3f-465b-8143-3b8a9948e749
cveMetadata > assignerShortName redhat
cveMetadata > cveId CVE-2015-5287
cveMetadata > datePublished 2015-12-07T18:00:00.000Z
cveMetadata > dateReserved 2015-07-01T00:00:00.000Z
cveMetadata > dateUpdated 2026-08-26T17:44:58.533Z
cveMetadata > state PUBLISHED
dataType CVE_RECORD
dataVersion 5.2