cve/2017/CVE-2017-15131.md

### [CVE-2017-15131](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15131)
![](https://img.shields.io/static/v1?label=Product&message=RHEL%20shipped%20xdg-user-dirs%20and%20gnome-session&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20before%200.15-5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284&color=brighgreen)

### Description

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/vulsio/go-cti