[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2015-5313":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":30,"references":32,"score":40,"epss_score":41,"epss_percentile":42,"is_kev":25,"cisa_kev_date_added":43,"cisa_kev_due_date":43,"cisa_ssvc":44,"attack_mappings":50,"exploits":57},178908,"CVE-2015-5313","EUVD-2015-5284","Directory traversal vulnerability in the virStorageBackendFileSystemVolCreate function in storage\u002Fstorage_backend_fs.c in libvirt, when fine-grained Access Control Lists (ACL) are in effect, allows local users with storage_vol:create ACL but not domain:write permission to write to arbitrary files via a .. (dot dot) in a volume name.","2016-04-11T21:59:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":15,"confidentialityImpact":15},"2.0",1.9,"LOCAL","AV:L\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","NONE","PARTIAL","MEDIUM",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":15,"attackComplexity":24,"availabilityImpact":15,"privilegesRequired":22,"confidentialityImpact":15},"UNCHANGED","3.0",2.5,"LOW","CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","HIGH",false,[27],"CWE-22",[29],"cpe:2.3:a:redhat:libvirt:-:*:*:*:*:*:*:*",[31],"Redhat Libvirt",[33,34,35,36,37,38,39],"http:\u002F\u002Flibvirt.org\u002Fgit\u002F?p=libvirt.git%3Ba=commit%3Bh=034e47c338b13a95cf02106a3af912c1c5f818d7","http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F174404.html","http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2577.html","http:\u002F\u002Fsecurity.libvirt.org\u002F2015\u002F0004.html","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F90913","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201612-10","https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Flibvir-list\u002F2015-December\u002Fmsg00473.html",0.12,0.00455,0.38593,null,{"timestamp":43,"automatable":45,"tech_impact":46,"exploitation":47,"cisa_decision":48,"cisa_remediation_timeline":49},"no","partial","none",{},"FSU",[51],{"name":52,"source":53,"tactics":54,"technique_id":56},"Exploitation for Privilege Escalation","attack_vector",[55],"privilege-escalation","T1068",[]]