admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
cvelist/2014/3xxx/CVE-2014-3530.json

306 lines
13 KiB
JSON
Raw Normal View History

- Populated repo from CVE List.
2017-10-16 12:31:07 -04:00
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
"CVE_data_meta": {
"ID": "CVE-2014-3530",
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"ASSIGNER": "secalert@redhat.com",
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
"STATE": "PUBLIC"
},
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"description": {
"description_data": [
{
"lang": "eng",
"value": "It was found that the implementation of the org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory() method provided a DocumentBuilderFactory that would expand entity references. A remote, unauthenticated attacker could use this flaw to read files accessible to the user running the application server, and potentially perform other more advanced XXE attacks."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Improper Restriction of XML External Entity Reference",
"cweId": "CWE-611"
}
]
}
]
},
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
"affects": {
"vendor": {
"vendor_data": [
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"vendor_name": "Red Hat",
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
"product": {
"product_data": [
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"product_name": "JBEWP 5 for RHEL 5",
"version": {
"version_data": [
{
"version_value": "0:2.1.5-3_patch_01.ep5.el5",
"version_affected": "!"
}
]
}
},
{
"product_name": "JBEWP 5 for RHEL 6",
"version": {
"version_data": [
{
"version_value": "0:2.1.5-3_patch_01.el6_5",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 4",
"version": {
"version_data": [
{
"version_value": "0:2.1.5-3_patch_01.ep5.el4",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 5",
"version": {
"version_data": [
{
"version_value": "0:2.1.5-3_patch_01.ep5.el5",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat JBoss Enterprise Application Platform 5 for RHEL 6",
"version": {
"version_data": [
{
"version_value": "0:2.1.5-3_patch_01.el6_5",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 5",
"version": {
"version_data": [
{
"version_value": "0:2.1.9-5.SP3_redhat_2.1.ep6.el5",
"version_affected": "!"
}
]
}
},
{
"product_name": "Red Hat JBoss Enterprise Application Platform 6.2 for RHEL 6",
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
"version": {
"version_data": [
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"version_value": "0:2.1.9-5.SP3_redhat_2.1.ep6.el6",
"version_affected": "!"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
}
]
}
}
]
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
}
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
}
]
}
},
"references": {
"reference_data": [
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2015-0675.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2015-0720.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2015-0720.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2015-0765.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2015-0765.html"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0910",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0910"
},
{
"url": "https://access.redhat.com/errata/RHSA-2015:0234",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0234"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:0235",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0235"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:0675",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0675"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:0720",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0720"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:0765",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0765"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:1009",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:1009"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2015-1888.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2015-1888.html"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "https://access.redhat.com/errata/RHSA-2015:1888",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:1888"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2014-0883.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2014-0883.html"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2014-0884.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2014-0884.html"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2014-0885.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2014-0885.html"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2014-0886.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2014-0886.html"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
},
{
"-Synchronized-Data."
2023-02-02 20:00:48 +00:00
"url": "http://rhn.redhat.com/errata/RHSA-2015-0091.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2015-0091.html"
},
{
"url": "http://secunia.com/advisories/60047",
"refsource": "MISC",
"name": "http://secunia.com/advisories/60047"
},
{
"url": "http://secunia.com/advisories/60124",
"refsource": "MISC",
"name": "http://secunia.com/advisories/60124"
},
{
"url": "http://www.securitytracker.com/id/1030607",
"refsource": "MISC",
"name": "http://www.securitytracker.com/id/1030607"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0883",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0883"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0884",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0884"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0885",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0885"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0886",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0886"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0897",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0897"
},
{
"url": "https://access.redhat.com/errata/RHSA-2014:0898",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2014:0898"
},
{
"url": "https://access.redhat.com/errata/RHSA-2015:0091",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2015:0091"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2014-3530",
"refsource": "MISC",
"name": "https://access.redhat.com/security/cve/CVE-2014-3530"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987",
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1112987"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94700",
"refsource": "MISC",
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/94700"
}
]
},
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Alexander Papadakis for reporting this issue."
}
],
"impact": {
"cvss": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 7.5,
"collateralDamagePotential": "NOT_DEFINED",
"confidentialityImpact": "PARTIAL",
"confidentialityRequirement": "NOT_DEFINED",
"environmentalScore": 0,
"exploitability": "NOT_DEFINED",
"integrityImpact": "PARTIAL",
"integrityRequirement": "NOT_DEFINED",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"targetDistribution": "NOT_DEFINED",
"temporalScore": 0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
"-Synchronized-Data."
2019-03-18 06:35:25 +00:00
}
]
}
}
Reference in New Issue Copy Permalink