"-Synchronized-Data."

This commit is contained in:
CVE Team 2020-01-14 00:01:05 +00:00
parent f6e9773147
commit 5548b1fb96
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8

View File

@ -0,0 +1,72 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-6958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially cause denial-of-service."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://sourceforge.net/p/yajsw/bugs/166/",
"refsource": "MISC",
"name": "https://sourceforge.net/p/yajsw/bugs/166/"
},
{
"url": "https://github.com/NationalSecurityAgency/ghidra/issues/943",
"refsource": "MISC",
"name": "https://github.com/NationalSecurityAgency/ghidra/issues/943"
},
{
"url": "https://github.com/purpleracc00n/Exploits-and-PoC/blob/master/XXE%20in%20YAJSW%E2%80%99s%20JnlpSupport%20affects%20Ghidra%20Server.md",
"refsource": "MISC",
"name": "https://github.com/purpleracc00n/Exploits-and-PoC/blob/master/XXE%20in%20YAJSW%E2%80%99s%20JnlpSupport%20affects%20Ghidra%20Server.md"
}
]
}
}