admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-19 17:32:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2019-09-25 18:01:00 +00:00
parent 3ac9eab14b
commit 5b8fbb5704
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
40 changed files with 452 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
2014/2xxx/CVE-2014-2905.json
View File

@ -66,6 +66,11 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2177",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00059.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2188",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00071.html"
}
]
}

5
2014/3xxx/CVE-2014-3219.json
View File

@ -96,6 +96,11 @@
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2177",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00059.html"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2188",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00071.html"
}
]
}

5
2019/10xxx/CVE-2019-10401.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1498",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1498",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10402.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1525",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1525",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10403.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20(1)",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20(1)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10404.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20(2)",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1537%20(2)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10405.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1505",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1505",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10406.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1471",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1471",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10407.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-351",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-351",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10408.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10409.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10410.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-732",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-732",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10411.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1513",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1513",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10412.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1514",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1514",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10413.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1557",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1557",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10414.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1574",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1574",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10415.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10416.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1577",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10417.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(1)",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(1)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10418.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(2)",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-920%20(2)",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10419.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURTIY-1541",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURTIY-1541",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10420.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1543",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1543",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10421.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1544",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1544",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10422.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1548",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10423.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1551",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1551",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10424.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10425.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1572",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1572",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10426.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1573",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1573",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10427.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1507",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10428.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10429.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1575",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1575",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/10xxx/CVE-2019-10430.json
View File

@ -56,6 +56,11 @@
"name": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504",
"url": "https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1504",
"refsource": "CONFIRM"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20190925 Multiple vulnerabilities in Jenkins and Jenkins plugins",
"url": "http://www.openwall.com/lists/oss-security/2019/09/25/3"
}
]
}

5
2019/14xxx/CVE-2019-14783.json
View File

@ -56,6 +56,11 @@
"url": "https://security.samsungmobile.com/securityUpdate.smsb",
"refsource": "MISC",
"name": "https://security.samsungmobile.com/securityUpdate.smsb"
},
{
"refsource": "FULLDISC",
"name": "20190925 [CVE-2019-14783] Arbitrary file create with system-app privilege in Samsung Mobile Android FotaAgent Component",
"url": "http://seclists.org/fulldisclosure/2019/Sep/33"
}
]
}

62
2019/16xxx/CVE-2019-16884.json Normal file
View File

@ -0,0 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-16884",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/opencontainers/runc/issues/2128",
"refsource": "MISC",
"name": "https://github.com/opencontainers/runc/issues/2128"
}
]
}
}

62
2019/16xxx/CVE-2019-16887.json Normal file
View File

@ -0,0 +1,62 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-16887",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://github.com/cribdragg3r/offensive_research/blob/master/bugs/irfanview/0x000000000001dcfc.adoc",
"refsource": "MISC",
"name": "https://github.com/cribdragg3r/offensive_research/blob/master/bugs/irfanview/0x000000000001dcfc.adoc"
}
]
}
}

5
2019/1xxx/CVE-2019-1547.json
View File

@ -122,6 +122,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2019-d15aac6c4e",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2189",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html"
}
]
}

5
2019/1xxx/CVE-2019-1563.json
View File

@ -117,6 +117,11 @@
"refsource": "FEDORA",
"name": "FEDORA-2019-d15aac6c4e",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/"
},
{
"refsource": "SUSE",
"name": "openSUSE-SU-2019:2189",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html"
}
]
}

58
2019/6xxx/CVE-2019-6651.json
View File

@ -1,17 +1,61 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-6651",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-6651",
"ASSIGNER": "f5sirt@f5.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager",
"version": {
"version_data": [
{
"version_value": "BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, Enterprise Manager 3.1.1"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Oracle"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://support.f5.com/csp/article/K89509323",
"url": "https://support.f5.com/csp/article/K89509323"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request."
}
]
}

58
2019/6xxx/CVE-2019-6652.json
View File

@ -1,17 +1,61 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-6652",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-6652",
"ASSIGNER": "f5sirt@f5.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "BIG-IQ",
"version": {
"version_data": [
{
"version_value": "6.0.0-6.1.0"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information leakage"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://support.f5.com/csp/article/K23101430",
"url": "https://support.f5.com/csp/article/K23101430"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS)."
}
]
}

58
2019/6xxx/CVE-2019-6653.json
View File

@ -1,17 +1,61 @@
{
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-6653",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2019-6653",
"ASSIGNER": "f5sirt@f5.com",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "BIG-IQ",
"version": {
"version_data": [
{
"version_value": "6.0.0-6.1.0, 5.2.0-5.4.0"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "XSS"
}
]
}
]
},
"references": {
"reference_data": [
{
"refsource": "MISC",
"name": "https://support.f5.com/csp/article/K71712132",
"url": "https://support.f5.com/csp/article/K71712132"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can be stored by users granted the Device Manager and Administrator roles."
}
]
}