CVE-2017-15131

—

CVSS 3.0

7.8 high

EPSS

<1%p25

Published

Jan 9, 2018 (Jan 9, 2018)

Modified

Jun 17, 2026

Description

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

Vendors: freedesktop redhat
Products: xdg-user-dirs, enterprise linux
Weakness: CWE-284, CWE-276
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.