From b5c868f66443ee38a5b7a787df4e222c76cf6b24 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 24 Feb 2020 13:01:21 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2019/0xxx/CVE-2019-0189.json | 10 +++++ 2019/15xxx/CVE-2019-15299.json | 72 ++++++++++++++++++++++++++++++++++ 2020/8xxx/CVE-2020-8112.json | 10 +++++ 3 files changed, 92 insertions(+) create mode 100644 2019/15xxx/CVE-2019-15299.json diff --git a/2019/0xxx/CVE-2019-0189.json b/2019/0xxx/CVE-2019-0189.json index 5f20c44b0ac..bdba7e87825 100644 --- a/2019/0xxx/CVE-2019-0189.json +++ b/2019/0xxx/CVE-2019-0189.json @@ -73,6 +73,16 @@ "refsource": "MLIST", "name": "[ofbiz-commits] 20200224 [ofbiz-framework] branch trunk updated: Fixed: Improve ObjectInputStream class (CVE-2019-0189) Improved: no functional change (OFBIZ-10837) (OFBIZ-11398)", "url": "https://lists.apache.org/thread.html/ref1b535d7bd5423bfb456cd05aa41e52875390cdfc6ae7c50397ead6@%3Ccommits.ofbiz.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[ofbiz-commits] 20200224 [ofbiz-framework] branch release17.12 updated: Fixed: Improve ObjectInputStream class (CVE-2019-0189) Improved: no functional change (OFBIZ-10837) (OFBIZ-11398)", + "url": "https://lists.apache.org/thread.html/r883840bbb4e2366acd0f6477e86b584000900a270a86587f979a55f9@%3Ccommits.ofbiz.apache.org%3E" + }, + { + "refsource": "MLIST", + "name": "[ofbiz-commits] 20200224 [ofbiz-framework] branch release18.12 updated: Fixed: Improve ObjectInputStream class (CVE-2019-0189) Improved: no functional change (OFBIZ-10837) (OFBIZ-11398)", + "url": "https://lists.apache.org/thread.html/rb0e716837168dc1073fcd76bea644806e5337c247fdb5d8c243d41f8@%3Ccommits.ofbiz.apache.org%3E" } ] }, diff --git a/2019/15xxx/CVE-2019-15299.json b/2019/15xxx/CVE-2019-15299.json new file mode 100644 index 00000000000..431adca4475 --- /dev/null +++ b/2019/15xxx/CVE-2019-15299.json @@ -0,0 +1,72 @@ +{ + "CVE_data_meta": { + "ASSIGNER": "cve@mitre.org", + "ID": "CVE-2019-15299", + "STATE": "PUBLIC" + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "product_name": "n/a", + "version": { + "version_data": [ + { + "version_value": "n/a" + } + ] + } + } + ] + }, + "vendor_name": "n/a" + } + ] + } + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the contact_autologin_key field in the database becomes blank when it should be NULL. This makes it possible to partially bypass authentication." + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "lang": "eng", + "value": "n/a" + } + ] + } + ] + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "name": "https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html", + "url": "https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.04.html" + }, + { + "refsource": "MISC", + "name": "https://github.com/centreon/centreon/pull/8072", + "url": "https://github.com/centreon/centreon/pull/8072" + }, + { + "refsource": "MISC", + "name": "https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html", + "url": "https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-19.10.html" + } + ] + } +} \ No newline at end of file diff --git a/2020/8xxx/CVE-2020-8112.json b/2020/8xxx/CVE-2020-8112.json index 0ad9be2b6af..bdcbb5149b0 100644 --- a/2020/8xxx/CVE-2020-8112.json +++ b/2020/8xxx/CVE-2020-8112.json @@ -71,6 +71,16 @@ "refsource": "FEDORA", "name": "FEDORA-2020-ad63f760f4", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TFEVEKETJV7GOXD5RDWL35ESEDHC663E/" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0570", + "url": "https://access.redhat.com/errata/RHSA-2020:0570" + }, + { + "refsource": "REDHAT", + "name": "RHSA-2020:0569", + "url": "https://access.redhat.com/errata/RHSA-2020:0569" } ] }