A vulnerability in abrt-server allows a local attacker to read environment variables and related metadata of other users' or root processes. This occurs because abrt-server, running as root, trusts a client-supplied process ID (PID) when creating problem dumps over abrt.socket and copies the /proc data of that process into a dump directory owned by the unprivileged user. This flaw enables unauthorized local information disclosure.