mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-06-07 21:47:16 +00:00
- Synchronized data.
This commit is contained in:
CVE Team
parent
d6a889d50b
commit
83dc02f3a9
@ -72,6 +72,11 @@
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "http://support.citrix.com/article/CTX207824"
|
||||
},
|
||||
{
|
||||
"name" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133",
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133"
|
||||
},
|
||||
{
|
||||
"name" : "VU#485744",
|
||||
"refsource" : "CERT-VN",
|
||||
|
||||
@ -76,6 +76,11 @@
|
||||
"name" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02",
|
||||
"refsource" : "MISC",
|
||||
"url" : "https://ics-cert.us-cert.gov/advisories/ICSA-18-102-02"
|
||||
},
|
||||
{
|
||||
"name" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133",
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073133"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@ -47,7 +47,7 @@
|
||||
"description_data" : [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value": "Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.\n"
|
||||
"value" : "Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege."
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -66,7 +66,8 @@
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
{
|
||||
"refsource": "CONFIRM",
|
||||
"name" : "20180522 DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilities",
|
||||
"refsource" : "FULLDISC",
|
||||
"url" : "http://seclists.org/fulldisclosure/2018/May/61"
|
||||
}
|
||||
]
|
||||
|
||||
@ -47,7 +47,7 @@
|
||||
"description_data" : [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value": "Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks.\n"
|
||||
"value" : "Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP password to use it in further attacks."
|
||||
}
|
||||
]
|
||||
},
|
||||
@ -66,7 +66,8 @@
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
{
|
||||
"refsource": "CONFIRM",
|
||||
"name" : "20180522 DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilities",
|
||||
"refsource" : "FULLDISC",
|
||||
"url" : "http://seclists.org/fulldisclosure/2018/May/61"
|
||||
}
|
||||
]
|
||||
|
||||
@ -66,7 +66,8 @@
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
{
|
||||
"refsource": "CONFIRM",
|
||||
"name" : "20180522 DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilities",
|
||||
"refsource" : "FULLDISC",
|
||||
"url" : "http://seclists.org/fulldisclosure/2018/May/61"
|
||||
}
|
||||
]
|
||||
|
||||
@ -1,5 +1,46 @@
|
||||
{
|
||||
"CVE_data_meta" : {
|
||||
"ASSIGNER" : "psirt@us.ibm.com",
|
||||
"DATE_PUBLIC" : "2018-05-11T00:00:00",
|
||||
"ID" : "CVE-2018-1495",
|
||||
"STATE" : "PUBLIC"
|
||||
},
|
||||
"affects" : {
|
||||
"vendor" : {
|
||||
"vendor_data" : [
|
||||
{
|
||||
"product" : {
|
||||
"product_data" : [
|
||||
{
|
||||
"product_name" : "FlashSystem V900",
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
{
|
||||
"version_value" : " "
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
{
|
||||
"product_name" : "FlashSystem V840",
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
{
|
||||
"version_value" : " "
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name" : "IBM"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"data_format" : "MITRE",
|
||||
"data_type" : "CVE",
|
||||
"data_version" : "4.0",
|
||||
"description" : {
|
||||
"description_data" : [
|
||||
{
|
||||
@ -8,99 +49,55 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"impact" : {
|
||||
"cvssv3" : {
|
||||
"BM" : {
|
||||
"A" : "H",
|
||||
"AC" : "L",
|
||||
"AV" : "N",
|
||||
"C" : "N",
|
||||
"I" : "N",
|
||||
"PR" : "L",
|
||||
"S" : "U",
|
||||
"SCORE" : "6.500",
|
||||
"UI" : "N"
|
||||
},
|
||||
"TM" : {
|
||||
"E" : "U",
|
||||
"RC" : "C",
|
||||
"RL" : "O"
|
||||
}
|
||||
}
|
||||
},
|
||||
"problemtype" : {
|
||||
"problemtype_data" : [
|
||||
{
|
||||
"description" : [
|
||||
{
|
||||
"value" : "Denial of Service",
|
||||
"lang" : "eng"
|
||||
"lang" : "eng",
|
||||
"value" : "Denial of Service"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"impact" : {
|
||||
"cvssv3" : {
|
||||
"BM" : {
|
||||
"I" : "N",
|
||||
"C" : "N",
|
||||
"UI" : "N",
|
||||
"A" : "H",
|
||||
"PR" : "L",
|
||||
"S" : "U",
|
||||
"AC" : "L",
|
||||
"AV" : "N",
|
||||
"SCORE" : "6.500"
|
||||
},
|
||||
"TM" : {
|
||||
"E" : "U",
|
||||
"RL" : "O",
|
||||
"RC" : "C"
|
||||
}
|
||||
}
|
||||
},
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
{
|
||||
"title" : "IBM Security Bulletin S1012281 (FlashSystem V840)",
|
||||
"name" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012280",
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012280"
|
||||
},
|
||||
{
|
||||
"name" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012281",
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012281"
|
||||
},
|
||||
{
|
||||
"refsource" : "CONFIRM",
|
||||
"name" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012280",
|
||||
"url" : "http://www.ibm.com/support/docview.wss?uid=ssg1S1012280",
|
||||
"title" : "IBM Security Bulletin S1012280 (FlashSystem 840)"
|
||||
},
|
||||
{
|
||||
"name" : "ibm-flashsystem-cve20181495-dos(141148)",
|
||||
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/141148",
|
||||
"refsource" : "XF",
|
||||
"title" : "X-Force Vulnerability Report"
|
||||
}
|
||||
]
|
||||
},
|
||||
"CVE_data_meta" : {
|
||||
"ASSIGNER" : "psirt@us.ibm.com",
|
||||
"ID" : "CVE-2018-1495",
|
||||
"STATE" : "PUBLIC",
|
||||
"DATE_PUBLIC" : "2018-05-11T00:00:00"
|
||||
},
|
||||
"data_format" : "MITRE",
|
||||
"data_version" : "4.0",
|
||||
"affects" : {
|
||||
"vendor" : {
|
||||
"vendor_data" : [
|
||||
{
|
||||
"product" : {
|
||||
"product_data" : [
|
||||
{
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
{
|
||||
"version_value" : " "
|
||||
}
|
||||
]
|
||||
},
|
||||
"product_name" : "FlashSystem V900"
|
||||
},
|
||||
{
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
{
|
||||
"version_value" : " "
|
||||
}
|
||||
]
|
||||
},
|
||||
"product_name" : "FlashSystem V840"
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name" : "IBM"
|
||||
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/141148"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user