mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
"-Synchronized-Data."
This commit is contained in:
parent
0f13554c96
commit
0305178d61
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "19c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "19c"
|
||||
},
|
||||
{
|
||||
"version_value": "21c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "21c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.0.0.3.0-12.0.0.7.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.0.0.3.0-12.0.0.7.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.6-12.2.8",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.6-12.2.8"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "9.1.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "9.1.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "19c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "19c"
|
||||
},
|
||||
{
|
||||
"version_value": "21c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "21c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "9.1.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "9.1.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "19c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "19c"
|
||||
},
|
||||
{
|
||||
"version_value": "21c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "21c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,20 +43,20 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "Oracle Java SE:8u351",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:8u351"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:8u351-perf",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:8u351-perf"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -81,7 +81,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "9.2",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "9.2"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.9.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.9.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "6.4.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "6.4.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,28 +43,28 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "Oracle Java SE:11.0.17",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:11.0.17"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:17.0.5",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:17.0.5"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:19.0.1",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:19.0.1"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:22.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:22.3.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -89,7 +89,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.3.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
},
|
||||
{
|
||||
"version_value": "14.1.1.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "14.1.1.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.3.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
},
|
||||
{
|
||||
"version_value": "14.1.1.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "14.1.1.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.3.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
},
|
||||
{
|
||||
"version_value": "14.1.1.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "14.1.1.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.7.40 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.7.40 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.3.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
},
|
||||
{
|
||||
"version_value": "14.1.1.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "14.1.1.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.3.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
},
|
||||
{
|
||||
"version_value": "14.1.1.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "14.1.1.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,36 +43,36 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "Oracle Java SE:8u351",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:8u351"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:8u351-perf",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:8u351-perf"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:11.0.17",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:11.0.17"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:17.0.5",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:17.0.5"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle Java SE:19.0.1",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle Java SE:19.0.1"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:20.3.8"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:21.3.4"
|
||||
},
|
||||
{
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:22.3.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "Oracle GraalVM Enterprise Edition:22.3.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -97,7 +97,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.59",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.59"
|
||||
},
|
||||
{
|
||||
"version_value": "8.60",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.60"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.60",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.60"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,16 +43,16 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.9.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.9.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "6.4.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "6.4.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -77,7 +77,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "3.0.3.1.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "3.0.3.1.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.1",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.1"
|
||||
},
|
||||
{
|
||||
"version_value": "12.2",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.3-12.2.12",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.3-12.2.12"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,20 +43,20 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "7.4.38 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "7.4.38 and prior"
|
||||
},
|
||||
{
|
||||
"version_value": "7.5.28 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "7.5.28 and prior"
|
||||
},
|
||||
{
|
||||
"version_value": "7.6.24 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "7.6.24 and prior"
|
||||
},
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -81,7 +81,7 @@
|
||||
{
|
||||
"attackVector": "ADJACENT_NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.9.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.9.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "6.4.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "6.4.0.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "12.2.1.4.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "12.2.1.4.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.30 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.30 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.30 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.30 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.28 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.28 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.29 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.29 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.30 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.30 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,8 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "8.0.31 and prior",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.31 and prior"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +69,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,20 +43,20 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "18.8.0-18.8.15",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "18.8.0-18.8.15"
|
||||
},
|
||||
{
|
||||
"version_value": "19.12.0-19.12.15",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "19.12.0-19.12.15"
|
||||
},
|
||||
{
|
||||
"version_value": "20.12.0-20.12.10",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "20.12.0-20.12.10"
|
||||
},
|
||||
{
|
||||
"version_value": "21.12.0-21.12.8",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "21.12.0-21.12.8"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -81,7 +81,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "7.1.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "7.1.0"
|
||||
},
|
||||
{
|
||||
"version_value": "8.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "8.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.9.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.9.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "6.4.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "6.4.0.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "5.9.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "5.9.0.0.0"
|
||||
},
|
||||
{
|
||||
"version_value": "6.4.0.0.0",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "6.4.0.0.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "19c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "19c"
|
||||
},
|
||||
{
|
||||
"version_value": "21c",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "21c"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "13.9.4.2.11"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,8 +43,9 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "*",
|
||||
"version_affected": "="
|
||||
"version_affected": "<",
|
||||
"version_name": "*",
|
||||
"version_value": "6.1.42"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -69,7 +70,7 @@
|
||||
{
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired ": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -43,12 +43,12 @@
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value": "10",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "10"
|
||||
},
|
||||
{
|
||||
"version_value": "11",
|
||||
"version_affected": "="
|
||||
"version_affected": "=",
|
||||
"version_value": "11"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -73,7 +73,7 @@
|
||||
{
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired ": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
|
@ -1,17 +1,85 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-28441",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security-advisories@github.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "smartCARS 3 is flight tracking software. In version 0.5.8 and prior, all persons who have failed login attempts will have their password stored in error logs. This problem doesn't occur in version 0.5.9. As a workaround, delete the affected log file, and ensure one logs in correctly."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-532: Insertion of Sensitive Information into Log File",
|
||||
"cweId": "CWE-532"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "invernyx",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "smartcars-3-bugs",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": "< 0.5.9"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/invernyx/smartcars-3-bugs/security/advisories/GHSA-fp42-c8g2-5jc7"
|
||||
}
|
||||
]
|
||||
},
|
||||
"source": {
|
||||
"advisory": "GHSA-fp42-c8g2-5jc7",
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 8,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
@ -1,17 +1,103 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-28442",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security-advisories@github.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. Prior to versions 2.20.6, 2.19.6, and 2.18.7, anonymous users can obtain sensitive information about GeoNode configurations from the response of the `/geoserver/rest/about/status` Geoserver REST API endpoint. The Geoserver endpoint is secured by default, but the configuration of Geoserver for GeoNode opens a list of REST endpoints to support some of its public-facing services. The vulnerability impacts both GeoNode 3 and GeoNode 4 instances. Geoserver security configuration is provided by `geoserver-geonode-ext`. A patch for 2.20.7 has been released which blocks access to the affected endpoint. The patch has been backported to branches 2.20.6, 2.19.7, 2.19.6, and 2.18.7. All the published artifacts and Docker images have been updated accordingly. A more advanced patch has been applied to the master and development versions, which require some changes to GeoNode code. They will be available with the next 4.1.0 release. The patched configuration only has an effect on new deployments. For existing setups, the patch must be applied manually inside the Geoserver data directory. The patched file must replace the existing `<geoserver_datadir>/security/rest.properties` file."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor",
|
||||
"cweId": "CWE-200"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "GeoNode",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "geonode",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": ">= 2.20.0, < 2.20.6"
|
||||
},
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": ">= 2.19.0, < 2.19.6"
|
||||
},
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": "< 2.18.7"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/GeoNode/geonode/security/advisories/GHSA-87mh-vw7c-5v6w",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/GeoNode/geonode/security/advisories/GHSA-87mh-vw7c-5v6w"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/GeoNode/geoserver-geonode-ext/commit/f44cb074d8361c0f4e625013675bdd7bd8203df6",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/GeoNode/geoserver-geonode-ext/commit/f44cb074d8361c0f4e625013675bdd7bd8203df6"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/GeoNode/geoserver-geonode-ext/blob/2.20.7/data/security/rest.properties",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/GeoNode/geoserver-geonode-ext/blob/2.20.7/data/security/rest.properties"
|
||||
}
|
||||
]
|
||||
},
|
||||
"source": {
|
||||
"advisory": "GHSA-87mh-vw7c-5v6w",
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
@ -1,17 +1,104 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-28443",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security-advisories@github.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacted properly from the log outputs and can be used to impersonate users without their permission. This issue is patched in version 9.23.3."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-532: Insertion of Sensitive Information into Log File",
|
||||
"cweId": "CWE-532"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-284: Improper Access Control",
|
||||
"cweId": "CWE-284"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "directus",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "directus",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": "< 9.23.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afc",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afc"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13"
|
||||
}
|
||||
]
|
||||
},
|
||||
"source": {
|
||||
"advisory": "GHSA-8vg2-wf3q-mwv7",
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"availabilityImpact": "NONE",
|
||||
"baseScore": 4.2,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"scope": "UNCHANGED",
|
||||
"userInteraction": "REQUIRED",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
@ -1,17 +1,104 @@
|
||||
{
|
||||
"data_version": "4.0",
|
||||
"data_type": "CVE",
|
||||
"data_format": "MITRE",
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ID": "CVE-2023-28445",
|
||||
"ASSIGNER": "cve@mitre.org",
|
||||
"STATE": "RESERVED"
|
||||
"ASSIGNER": "security-advisories@github.com",
|
||||
"STATE": "PUBLIC"
|
||||
},
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
|
||||
"value": "Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. Deno 1.32.2 will re-enable resizable ArrayBuffers with a proper fix. As a workaround, run with `--v8-flags=--no-harmony-rab-gsab` to disable resizable ArrayBuffers."
|
||||
}
|
||||
]
|
||||
},
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-125: Out-of-bounds Read",
|
||||
"cweId": "CWE-125"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"description": [
|
||||
{
|
||||
"lang": "eng",
|
||||
"value": "CWE-787: Out-of-bounds Write",
|
||||
"cweId": "CWE-787"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name": "denoland",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name": "deno",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_affected": "=",
|
||||
"version_value": "= 1.32.0"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"url": "https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/denoland/deno/security/advisories/GHSA-c25x-cm9x-qqgx"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/denoland/deno/pull/18395",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/denoland/deno/pull/18395"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/denoland/deno/releases/tag/v1.32.1",
|
||||
"refsource": "MISC",
|
||||
"name": "https://github.com/denoland/deno/releases/tag/v1.32.1"
|
||||
}
|
||||
]
|
||||
},
|
||||
"source": {
|
||||
"advisory": "GHSA-c25x-cm9x-qqgx",
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"impact": {
|
||||
"cvss": [
|
||||
{
|
||||
"attackComplexity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"availabilityImpact": "HIGH",
|
||||
"baseScore": 10,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"scope": "CHANGED",
|
||||
"userInteraction": "NONE",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"version": "3.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user