CVE-2015-1197

CVSS 2.0: 1.9 low
EPSS: 3%p87
Published: Feb 19, 2015 · Feb 19, 2015
Modified: Oct 14, 2026

Analyze CVE-2015-1197 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.

Vendors: gnu

Products: cpio

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news

5 stories

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

The Hacker NewsOct 17, 09:50 UTC · Oct 17, 2022VulnerabilityExploitedCVE-2022-41352 CVE-2015-11973

Description · NVD

In the news

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

Threat actors hacked hundreds of servers by exploiting Zimbra CVE-2022

Unpatched Zimbra Collaboration Suite RCE CVE-2022

Unpatched Zimbra RCE bug exploited by attackers (CVE-2022-41352)

Ongoing exploitation of CVE-2022-41352 (Zimbra 0