CVE-2015-1327

LOW

Content Hub <0.0+15.04.20150331-0ubuntu1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.

References (1)

Core 1
Core References

Scores

CVSS v3 3.9
EPSS 0.0080
EPSS Percentile 52.4%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-264
Status published
Products (1)
canonical/ubuntu_linux 15.04
Published Apr 22, 2019
Tracked Since Feb 18, 2026