CVE-2015-5287

A privilege escalation flaw in Red Hat's Automatic Bug Reporting Tool allowed local users to escalate privileges via a symlink attack on a predictable file.

The Red Hat Automatic Bug Reporting Tool (ABRT) contained a privilege escalation vulnerability that permitted local users with specific permissions to gain elevated access through a symlink attack on a file with a predictable name. DIB organizations must ensure all software components, including EoL/EoS tools, are patched or replaced to prevent local privilege escalation that could compromise system integrity and violate CMMC/NIST 800-171 controls. Organizations should transition to supported versions immediately to mitigate this actively exploited vulnerability.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed privilege escalation, indicating a significant avoidable risk that was not mitigated by timely patching or proper lifecycle management.