CVE-2017-15131

HIGH · CVSS 7.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-15131

Severity

HIGH

CVSS

7.8

EPSS

0.32%

Linux

Original Filing — NVD Description

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.