From d3c8d60ea328c95fa394b97e372ebb6a2f212745 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Wed, 27 Jan 2021 14:00:42 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2020/4xxx/CVE-2020-4628.json | 180 +++++++++++++++++------------------ 2020/4xxx/CVE-2020-4816.json | 174 ++++++++++++++++----------------- 2020/4xxx/CVE-2020-4967.json | 174 ++++++++++++++++----------------- 3 files changed, 264 insertions(+), 264 deletions(-) diff --git a/2020/4xxx/CVE-2020-4628.json b/2020/4xxx/CVE-2020-4628.json index 55f6a152305..428341edace 100644 --- a/2020/4xxx/CVE-2020-4628.json +++ b/2020/4xxx/CVE-2020-4628.json @@ -1,93 +1,93 @@ { - "data_type" : "CVE", - "problemtype" : { - "problemtype_data" : [ - { - "description" : [ - { - "lang" : "eng", - "value" : "Obtain Information" - } - ] - } - ] - }, - "impact" : { - "cvssv3" : { - "BM" : { - "PR" : "N", - "C" : "L", - "AV" : "N", - "I" : "N", - "AC" : "L", - "UI" : "N", - "SCORE" : "5.300", - "A" : "N", - "S" : "U" - }, - "TM" : { - "RC" : "C", - "E" : "U", - "RL" : "O" - } - } - }, - "CVE_data_meta" : { - "ID" : "CVE-2020-4628", - "STATE" : "PUBLIC", - "ASSIGNER" : "psirt@us.ibm.com", - "DATE_PUBLIC" : "2021-01-26T00:00:00" - }, - "references" : { - "reference_data" : [ - { - "title" : "IBM Security Bulletin 6408656 (Cloud Pak for Security)", - "name" : "https://www.ibm.com/support/pages/node/6408656", - "url" : "https://www.ibm.com/support/pages/node/6408656", - "refsource" : "CONFIRM" - }, - { - "refsource" : "XF", - "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/185369", - "name" : "ibm-cp4s-cve20204628-info-disc (185369)", - "title" : "X-Force Vulnerability Report" - } - ] - }, - "data_format" : "MITRE", - "description" : { - "description_data" : [ - { - "lang" : "eng", - "value" : "IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369." - } - ] - }, - "affects" : { - "vendor" : { - "vendor_data" : [ + "data_type": "CVE", + "problemtype": { + "problemtype_data": [ { - "product" : { - "product_data" : [ - { - "version" : { - "version_data" : [ - { - "version_value" : "1.3.0.1" - }, - { - "version_value" : "1.4.0.0" - } - ] - }, - "product_name" : "Cloud Pak for Security" - } - ] - }, - "vendor_name" : "IBM" + "description": [ + { + "lang": "eng", + "value": "Obtain Information" + } + ] } - ] - } - }, - "data_version" : "4.0" -} + ] + }, + "impact": { + "cvssv3": { + "BM": { + "PR": "N", + "C": "L", + "AV": "N", + "I": "N", + "AC": "L", + "UI": "N", + "SCORE": "5.300", + "A": "N", + "S": "U" + }, + "TM": { + "RC": "C", + "E": "U", + "RL": "O" + } + } + }, + "CVE_data_meta": { + "ID": "CVE-2020-4628", + "STATE": "PUBLIC", + "ASSIGNER": "psirt@us.ibm.com", + "DATE_PUBLIC": "2021-01-26T00:00:00" + }, + "references": { + "reference_data": [ + { + "title": "IBM Security Bulletin 6408656 (Cloud Pak for Security)", + "name": "https://www.ibm.com/support/pages/node/6408656", + "url": "https://www.ibm.com/support/pages/node/6408656", + "refsource": "CONFIRM" + }, + { + "refsource": "XF", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/185369", + "name": "ibm-cp4s-cve20204628-info-disc (185369)", + "title": "X-Force Vulnerability Report" + } + ] + }, + "data_format": "MITRE", + "description": { + "description_data": [ + { + "lang": "eng", + "value": "IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369." + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "product": { + "product_data": [ + { + "version": { + "version_data": [ + { + "version_value": "1.3.0.1" + }, + { + "version_value": "1.4.0.0" + } + ] + }, + "product_name": "Cloud Pak for Security" + } + ] + }, + "vendor_name": "IBM" + } + ] + } + }, + "data_version": "4.0" +} \ No newline at end of file diff --git a/2020/4xxx/CVE-2020-4816.json b/2020/4xxx/CVE-2020-4816.json index a48fed70d04..e5a4495ea13 100644 --- a/2020/4xxx/CVE-2020-4816.json +++ b/2020/4xxx/CVE-2020-4816.json @@ -1,90 +1,90 @@ { - "data_type" : "CVE", - "problemtype" : { - "problemtype_data" : [ - { - "description" : [ - { - "value" : "Obtain Information", - "lang" : "eng" - } - ] - } - ] - }, - "impact" : { - "cvssv3" : { - "TM" : { - "RC" : "C", - "E" : "U", - "RL" : "O" - }, - "BM" : { - "AV" : "N", - "C" : "H", - "PR" : "N", - "I" : "N", - "AC" : "H", - "UI" : "R", - "SCORE" : "5.300", - "S" : "U", - "A" : "N" - } - } - }, - "CVE_data_meta" : { - "DATE_PUBLIC" : "2021-01-26T00:00:00", - "STATE" : "PUBLIC", - "ASSIGNER" : "psirt@us.ibm.com", - "ID" : "CVE-2020-4816" - }, - "references" : { - "reference_data" : [ - { - "url" : "https://www.ibm.com/support/pages/node/6408658", - "name" : "https://www.ibm.com/support/pages/node/6408658", - "title" : "IBM Security Bulletin 6408658 (Cloud Pak for Security)", - "refsource" : "CONFIRM" - }, - { - "title" : "X-Force Vulnerability Report", - "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/189703", - "name" : "ibm-cp4s-cve20204816-info-disc (189703)", - "refsource" : "XF" - } - ] - }, - "data_format" : "MITRE", - "affects" : { - "vendor" : { - "vendor_data" : [ + "data_type": "CVE", + "problemtype": { + "problemtype_data": [ { - "vendor_name" : "IBM", - "product" : { - "product_data" : [ - { - "product_name" : "Cloud Pak for Security", - "version" : { - "version_data" : [ - { - "version_value" : "1.4.0.0" - } - ] - } - } - ] - } + "description": [ + { + "value": "Obtain Information", + "lang": "eng" + } + ] } - ] - } - }, - "description" : { - "description_data" : [ - { - "lang" : "eng", - "value" : "IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189703." - } - ] - }, - "data_version" : "4.0" -} + ] + }, + "impact": { + "cvssv3": { + "TM": { + "RC": "C", + "E": "U", + "RL": "O" + }, + "BM": { + "AV": "N", + "C": "H", + "PR": "N", + "I": "N", + "AC": "H", + "UI": "R", + "SCORE": "5.300", + "S": "U", + "A": "N" + } + } + }, + "CVE_data_meta": { + "DATE_PUBLIC": "2021-01-26T00:00:00", + "STATE": "PUBLIC", + "ASSIGNER": "psirt@us.ibm.com", + "ID": "CVE-2020-4816" + }, + "references": { + "reference_data": [ + { + "url": "https://www.ibm.com/support/pages/node/6408658", + "name": "https://www.ibm.com/support/pages/node/6408658", + "title": "IBM Security Bulletin 6408658 (Cloud Pak for Security)", + "refsource": "CONFIRM" + }, + { + "title": "X-Force Vulnerability Report", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/189703", + "name": "ibm-cp4s-cve20204816-info-disc (189703)", + "refsource": "XF" + } + ] + }, + "data_format": "MITRE", + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "IBM", + "product": { + "product_data": [ + { + "product_name": "Cloud Pak for Security", + "version": { + "version_data": [ + { + "version_value": "1.4.0.0" + } + ] + } + } + ] + } + } + ] + } + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189703." + } + ] + }, + "data_version": "4.0" +} \ No newline at end of file diff --git a/2020/4xxx/CVE-2020-4967.json b/2020/4xxx/CVE-2020-4967.json index 2ae166be98c..26825624843 100644 --- a/2020/4xxx/CVE-2020-4967.json +++ b/2020/4xxx/CVE-2020-4967.json @@ -1,90 +1,90 @@ { - "data_type" : "CVE", - "problemtype" : { - "problemtype_data" : [ - { - "description" : [ - { - "lang" : "eng", - "value" : "Obtain Information" - } - ] - } - ] - }, - "CVE_data_meta" : { - "ID" : "CVE-2020-4967", - "STATE" : "PUBLIC", - "ASSIGNER" : "psirt@us.ibm.com", - "DATE_PUBLIC" : "2021-01-26T00:00:00" - }, - "impact" : { - "cvssv3" : { - "TM" : { - "E" : "U", - "RC" : "C", - "RL" : "O" - }, - "BM" : { - "I" : "N", - "PR" : "L", - "C" : "L", - "AV" : "N", - "A" : "N", - "S" : "U", - "UI" : "N", - "SCORE" : "3.100", - "AC" : "H" - } - } - }, - "references" : { - "reference_data" : [ - { - "refsource" : "CONFIRM", - "title" : "IBM Security Bulletin 6408662 (Cloud Pak for Security)", - "url" : "https://www.ibm.com/support/pages/node/6408662", - "name" : "https://www.ibm.com/support/pages/node/6408662" - }, - { - "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/192425", - "name" : "ibm-cp4s-cve20204967-info-disc (192425)", - "title" : "X-Force Vulnerability Report", - "refsource" : "XF" - } - ] - }, - "data_format" : "MITRE", - "description" : { - "description_data" : [ - { - "value" : "IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425.", - "lang" : "eng" - } - ] - }, - "affects" : { - "vendor" : { - "vendor_data" : [ + "data_type": "CVE", + "problemtype": { + "problemtype_data": [ { - "vendor_name" : "IBM", - "product" : { - "product_data" : [ - { - "product_name" : "Cloud Pak for Security", - "version" : { - "version_data" : [ - { - "version_value" : "1.3.0.1" - } - ] - } - } - ] - } + "description": [ + { + "lang": "eng", + "value": "Obtain Information" + } + ] } - ] - } - }, - "data_version" : "4.0" -} + ] + }, + "CVE_data_meta": { + "ID": "CVE-2020-4967", + "STATE": "PUBLIC", + "ASSIGNER": "psirt@us.ibm.com", + "DATE_PUBLIC": "2021-01-26T00:00:00" + }, + "impact": { + "cvssv3": { + "TM": { + "E": "U", + "RC": "C", + "RL": "O" + }, + "BM": { + "I": "N", + "PR": "L", + "C": "L", + "AV": "N", + "A": "N", + "S": "U", + "UI": "N", + "SCORE": "3.100", + "AC": "H" + } + } + }, + "references": { + "reference_data": [ + { + "refsource": "CONFIRM", + "title": "IBM Security Bulletin 6408662 (Cloud Pak for Security)", + "url": "https://www.ibm.com/support/pages/node/6408662", + "name": "https://www.ibm.com/support/pages/node/6408662" + }, + { + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/192425", + "name": "ibm-cp4s-cve20204967-info-disc (192425)", + "title": "X-Force Vulnerability Report", + "refsource": "XF" + } + ] + }, + "data_format": "MITRE", + "description": { + "description_data": [ + { + "value": "IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425.", + "lang": "eng" + } + ] + }, + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "IBM", + "product": { + "product_data": [ + { + "product_name": "Cloud Pak for Security", + "version": { + "version_data": [ + { + "version_value": "1.3.0.1" + } + ] + } + } + ] + } + } + ] + } + }, + "data_version": "4.0" +} \ No newline at end of file