CVE-2017-15131 - AskarLabs CVE Database

CVE-2017-15131

Vendor Red Hat, Inc.

Product RHEL shipped xdg-user-dirs and gnome-session

Weakness CWE-284

Published January 9, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

Key dates

02Disclosure timeline

January 9, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-15131 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html

Related vulnerabilities

04Related CVE

CVE-2026-41243 OpenLearn's pending forum posts remain publicly readable by direct ID when moderation mode is enabled CVE-2026-31874 Taskosaur Improper Role Assignment via Parameter Manipulation in User Registration CVE-2023-6968 The Moneytizer <= 9.6.3 - Cross-Site Request Forgery via multiple AJAX actions CVE-2023-40573 XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution CVE-2026-33890 MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration