CVE-2015-1327: Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access
Ubuntu · Content Hub
Fixed in 0.0 · Affected: Ubuntu Content Hub before 0.0 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 57% of scored CVEs
DescriptionCVE.org
Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Ubuntu · Content Hubbefore 0.0+15.04.20150331-0ubuntu1.0
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Ubuntu
- Published
- April 2019
CoverageNo articles yet
No CyberSIXT article names CVE-2015-1327 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.