[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRxUkD-GiKAYg5B4jLDdyNRNQl8Og6xnw4q1gmnd6eBU":3,"g5a-risk:CVE-2015-1038":181},{"success":4,"data":5,"meta":179},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":27,"epssPercentile":14,"epssTimeSeries":28,"severity":29,"affectedProducts":30,"affectedProductsCount":52,"references":53,"referencesCount":115,"weaknesses":116,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":14,"otxData":14,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":177,"notableEvents":178},"CVE-2015-1038","What is CVE-2015-1038?","p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.","2015-01-21T18:59:51.763","2025-04-12T10:46:40.837",5.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:P",{"CVSSMetricV31":14,"CVSSMetricV30":14,"CVSSMetricV2":15,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"BaseSeverity":22,"ExploitabilityScore":25,"ImpactScore":26,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,4.9,0.03291,[27,27,27,27,27,27,27],"Medium",[31,36,39,44,47],{"vendor":32,"product":33,"version":34,"criteria":35,"vulnerable":4},"fedoraproject","fedora","22","cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",{"vendor":32,"product":33,"version":37,"criteria":38,"vulnerable":4},"23","cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"oracle","solaris","10.0","cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*",{"vendor":40,"product":41,"version":45,"criteria":46,"vulnerable":4},"11.2","cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"7-zip","p7zip","9.20.1","cpe:2.3:a:7-zip:p7zip:9.20.1:*:*:*:*:*:*:*",5,[54,59,62,66,70,74,78,82,86,91,95,97,99,101,103,105,107,109,111,113],{"url":55,"source":56,"tags":57},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F173245.html","Fedoraproject",[58],"Third Party Advisory",{"url":60,"source":56,"tags":61},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-December\u002F174245.html",[58],{"url":63,"source":64,"tags":65},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2015-07\u002Fmsg00000.html","Opensuse",[],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2015\u002Fdsa-3289","Debian",[],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F01\u002F11\u002F2","Openwall",[58],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fbulletinjul2015-2511963.html","Oracle",[58],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F71890","Securityfocus",[58],{"url":83,"source":68,"tags":84},"https:\u002F\u002Fbugs.debian.org\u002Fcgi-bin\u002Fbugreport.cgi?bug=774660",[85,58],"Exploit",{"url":87,"source":88,"tags":89},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1179505","Red Hat",[85,90],"Issue Tracking",{"url":92,"source":93,"tags":94},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F99970","Ibmcloud",[],{"url":55,"source":56,"tags":96},[58],{"url":60,"source":56,"tags":98},[58],{"url":63,"source":64,"tags":100},[],{"url":67,"source":68,"tags":102},[],{"url":71,"source":72,"tags":104},[58],{"url":75,"source":76,"tags":106},[58],{"url":79,"source":80,"tags":108},[58],{"url":83,"source":68,"tags":110},[85,58],{"url":87,"source":88,"tags":112},[85,90],{"url":92,"source":93,"tags":114},[],20,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2015-1038? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-1038, a medium severity cyber security vulnerability from 2015. p7zip 9.20.1 allows remote attackers to write to arbitrary...","CVE-2015-1038, CVE-2015-1038 vulnerability, CVE-2015-1038 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, fedoraproject security, oracle security, 7-zip security, fedora vulnerability, solaris vulnerability, p7zip vulnerability","\u002Fwhat-is\u002Fcve-2015-1038",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":9,"dateModified":10,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-1038","Cybersecurity","CVE-2015-1038, CVE-2015-1038 vulnerability, CVE-2015-1038 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154,163,171],{"Operator":14,"Negate":14,"Nodes":155},[156],{"Operator":157,"Negate":14,"CPEMatch":158},"OR",[159,161],{"Vulnerable":4,"Criteria":35,"MatchCriteriaID":160,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"253C303A-E577-4488-93E6-68A8DD942C38",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":162,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B",{"Operator":14,"Negate":14,"Nodes":164},[165],{"Operator":157,"Negate":14,"CPEMatch":166},[167,169],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":168,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"FC633250-EB1E-4484-9BCB-977C8F9EB0B2",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":170,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"0B1C288F-326B-497B-B26C-D26E01262DDB",{"Operator":14,"Negate":14,"Nodes":172},[173],{"Operator":157,"Negate":14,"CPEMatch":174},[175],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":176,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"CD156C9E-96F4-4955-BA36-A9FD54180DD5",[],[],{"lastModified":10,"cacheTime":180,"version":20},1793196812626,{"score":182,"band":29,"action":183,"scoredAt":184},40,"Plan remediation","2026-10-28T06:39:20.362895+00:00"]