"-Synchronized-Data."

This commit is contained in:
CVE Team 2019-04-29 17:00:46 +00:00
parent be2b08f5f5
commit d4bfb84e65
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8
6 changed files with 382 additions and 382 deletions

View File

@ -1,95 +1,95 @@
{ {
"CVE_data_meta" : { "CVE_data_meta": {
"DATE_PUBLIC" : "2018-12-13T00:00:00", "DATE_PUBLIC": "2018-12-13T00:00:00",
"ID" : "CVE-2018-1961", "ID": "CVE-2018-1961",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER": "psirt@us.ibm.com",
"STATE" : "PUBLIC" "STATE": "PUBLIC"
}, },
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"lang" : "eng", "lang": "eng",
"value" : "Obtain Information" "value": "Obtain Information"
} }
] ]
} }
] ]
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"lang" : "eng", "lang": "eng",
"value" : "IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657." "value": "IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657."
} }
] ]
}, },
"data_version" : "4.0", "data_version": "4.0",
"data_type" : "CVE", "data_type": "CVE",
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "10.0.0" "version_value": "10.0.0"
}, },
{ {
"version_value" : "10.1.3" "version_value": "10.1.3"
}, },
{ {
"version_value" : "10.1.3.0" "version_value": "10.1.3.0"
} }
] ]
}, },
"product_name" : "Emptoris Contract Management" "product_name": "Emptoris Contract Management"
} }
] ]
}, },
"vendor_name" : "IBM" "vendor_name": "IBM"
} }
] ]
} }
}, },
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"title" : "IBM Security Bulletin 731107 (Emptoris Contract Management)", "title": "IBM Security Bulletin 731107 (Emptoris Contract Management)",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10731107", "url": "https://www.ibm.com/support/docview.wss?uid=ibm10731107",
"refsource" : "CONFIRM", "refsource": "CONFIRM",
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10731107" "name": "https://www.ibm.com/support/docview.wss?uid=ibm10731107"
}, },
{ {
"refsource" : "XF", "refsource": "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/153657", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153657",
"name" : "ibm-emptoris-cve20181961-info-disc (153657)", "name": "ibm-emptoris-cve20181961-info-disc (153657)",
"title" : "X-Force Vulnerability Report" "title": "X-Force Vulnerability Report"
} }
] ]
}, },
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"BM" : { "BM": {
"I" : "N", "I": "N",
"AC" : "L", "AC": "L",
"UI" : "N", "UI": "N",
"PR" : "N", "PR": "N",
"A" : "N", "A": "N",
"SCORE" : "5.300", "SCORE": "5.300",
"C" : "L", "C": "L",
"S" : "U", "S": "U",
"AV" : "N" "AV": "N"
}, },
"TM" : { "TM": {
"RL" : "O", "RL": "O",
"RC" : "C", "RC": "C",
"E" : "U" "E": "U"
} }
} }
} }

View File

@ -1,65 +1,65 @@
{ {
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"value" : "IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155006.", "value": "IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155006.",
"lang" : "eng" "lang": "eng"
} }
] ]
}, },
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"lang" : "eng", "lang": "eng",
"value" : "Cross-Site Scripting" "value": "Cross-Site Scripting"
} }
] ]
} }
] ]
}, },
"CVE_data_meta" : { "CVE_data_meta": {
"ID" : "CVE-2018-2004", "ID": "CVE-2018-2004",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC" : "2019-04-23T00:00:00", "DATE_PUBLIC": "2019-04-23T00:00:00",
"STATE" : "PUBLIC" "STATE": "PUBLIC"
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"vendor_name" : "IBM", "vendor_name": "IBM",
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "6.0" "version_value": "6.0"
}, },
{ {
"version_value" : "6.0.1" "version_value": "6.0.1"
}, },
{ {
"version_value" : "6.0.2" "version_value": "6.0.2"
}, },
{ {
"version_value" : "6.0.3" "version_value": "6.0.3"
}, },
{ {
"version_value" : "6.0.4" "version_value": "6.0.4"
}, },
{ {
"version_value" : "6.0.5" "version_value": "6.0.5"
}, },
{ {
"version_value" : "6.0.6" "version_value": "6.0.6"
} }
] ]
}, },
"product_name" : "Jazz Reporting Service" "product_name": "Jazz Reporting Service"
} }
] ]
} }
@ -67,41 +67,41 @@
] ]
} }
}, },
"data_type" : "CVE", "data_type": "CVE",
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"title" : "IBM Security Bulletin 882260 (Jazz Reporting Service)", "title": "IBM Security Bulletin 882260 (Jazz Reporting Service)",
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10882260", "name": "https://www.ibm.com/support/docview.wss?uid=ibm10882260",
"refsource" : "CONFIRM", "refsource": "CONFIRM",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10882260" "url": "https://www.ibm.com/support/docview.wss?uid=ibm10882260"
}, },
{ {
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/155006", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/155006",
"refsource" : "XF", "refsource": "XF",
"name" : "ibm-jrs-cve20182004-xss (155006)", "name": "ibm-jrs-cve20182004-xss (155006)",
"title" : "X-Force Vulnerability Report" "title": "X-Force Vulnerability Report"
} }
] ]
}, },
"data_version" : "4.0", "data_version": "4.0",
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"BM" : { "BM": {
"PR" : "L", "PR": "L",
"A" : "N", "A": "N",
"I" : "L", "I": "L",
"AC" : "L", "AC": "L",
"UI" : "R", "UI": "R",
"SCORE" : "5.400", "SCORE": "5.400",
"C" : "L", "C": "L",
"S" : "C", "S": "C",
"AV" : "N" "AV": "N"
}, },
"TM" : { "TM": {
"RL" : "O", "RL": "O",
"RC" : "C", "RC": "C",
"E" : "H" "E": "H"
} }
} }
} }

View File

@ -1,23 +1,23 @@
{ {
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"vendor_name" : "IBM", "vendor_name": "IBM",
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "2018.1" "version_value": "2018.1"
}, },
{ {
"version_value" : "2018.4.1.2" "version_value": "2018.4.1.2"
} }
] ]
}, },
"product_name" : "API Connect" "product_name": "API Connect"
} }
] ]
} }
@ -25,68 +25,68 @@
] ]
} }
}, },
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"title" : "IBM Security Bulletin 874952 (API Connect)", "title": "IBM Security Bulletin 874952 (API Connect)",
"name" : "http://www.ibm.com/support/docview.wss?uid=ibm10874952", "name": "http://www.ibm.com/support/docview.wss?uid=ibm10874952",
"url" : "http://www.ibm.com/support/docview.wss?uid=ibm10874952", "url": "http://www.ibm.com/support/docview.wss?uid=ibm10874952",
"refsource" : "CONFIRM" "refsource": "CONFIRM"
}, },
{ {
"name" : "ibm-api-cve20182007-info-disc (155078)", "name": "ibm-api-cve20182007-info-disc (155078)",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/155078", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/155078",
"refsource" : "XF", "refsource": "XF",
"title" : "X-Force Vulnerability Report" "title": "X-Force Vulnerability Report"
} }
] ]
}, },
"data_type" : "CVE", "data_type": "CVE",
"data_version" : "4.0", "data_version": "4.0",
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"lang" : "eng", "lang": "eng",
"value" : "IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 155078." "value": "IBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 155078."
} }
] ]
}, },
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"value" : "Obtain Information", "value": "Obtain Information",
"lang" : "eng" "lang": "eng"
} }
] ]
} }
] ]
}, },
"CVE_data_meta" : { "CVE_data_meta": {
"DATE_PUBLIC" : "2019-03-05T00:00:00", "DATE_PUBLIC": "2019-03-05T00:00:00",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER": "psirt@us.ibm.com",
"ID" : "CVE-2018-2007", "ID": "CVE-2018-2007",
"STATE" : "PUBLIC" "STATE": "PUBLIC"
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"BM" : { "BM": {
"AV" : "N", "AV": "N",
"S" : "U", "S": "U",
"SCORE" : "5.900", "SCORE": "5.900",
"C" : "H", "C": "H",
"A" : "N", "A": "N",
"PR" : "N", "PR": "N",
"UI" : "N", "UI": "N",
"I" : "N", "I": "N",
"AC" : "H" "AC": "H"
}, },
"TM" : { "TM": {
"E" : "U", "E": "U",
"RC" : "C", "RC": "C",
"RL" : "O" "RL": "O"
} }
} }
} }

View File

@ -1,21 +1,21 @@
{ {
"data_version" : "4.0", "data_version": "4.0",
"affects" : { "affects": {
"vendor" : { "vendor": {
"vendor_data" : [ "vendor_data": [
{ {
"vendor_name" : "IBM", "vendor_name": "IBM",
"product" : { "product": {
"product_data" : [ "product_data": [
{ {
"version" : { "version": {
"version_data" : [ "version_data": [
{ {
"version_value" : "6.0.6" "version_value": "6.0.6"
} }
] ]
}, },
"product_name" : "Jazz Reporting Service" "product_name": "Jazz Reporting Service"
} }
] ]
} }
@ -23,67 +23,67 @@
] ]
} }
}, },
"data_type" : "CVE", "data_type": "CVE",
"references" : { "references": {
"reference_data" : [ "reference_data": [
{ {
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10882262", "name": "https://www.ibm.com/support/docview.wss?uid=ibm10882262",
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10882262", "url": "https://www.ibm.com/support/docview.wss?uid=ibm10882262",
"refsource" : "CONFIRM", "refsource": "CONFIRM",
"title" : "IBM Security Bulletin 882262 (Jazz Reporting Service)" "title": "IBM Security Bulletin 882262 (Jazz Reporting Service)"
}, },
{ {
"name" : "ibm-jrs-cve20194047-info-disc (156243)", "name": "ibm-jrs-cve20194047-info-disc (156243)",
"refsource" : "XF", "refsource": "XF",
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/156243", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/156243",
"title" : "X-Force Vulnerability Report" "title": "X-Force Vulnerability Report"
} }
] ]
}, },
"data_format" : "MITRE", "data_format": "MITRE",
"problemtype" : { "problemtype": {
"problemtype_data" : [ "problemtype_data": [
{ {
"description" : [ "description": [
{ {
"value" : "Obtain Information", "value": "Obtain Information",
"lang" : "eng" "lang": "eng"
} }
] ]
} }
] ]
}, },
"CVE_data_meta" : { "CVE_data_meta": {
"STATE" : "PUBLIC", "STATE": "PUBLIC",
"ASSIGNER" : "psirt@us.ibm.com", "ASSIGNER": "psirt@us.ibm.com",
"ID" : "CVE-2019-4047", "ID": "CVE-2019-4047",
"DATE_PUBLIC" : "2019-04-23T00:00:00" "DATE_PUBLIC": "2019-04-23T00:00:00"
}, },
"description" : { "description": {
"description_data" : [ "description_data": [
{ {
"value" : "IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.", "value": "IBM Jazz Reporting Service (JRS) 6.0.6 could allow an authenticated user to access the execution log files as a guest user, and obtain the information of the server execution. IBM X-Force ID: 156243.",
"lang" : "eng" "lang": "eng"
} }
] ]
}, },
"impact" : { "impact": {
"cvssv3" : { "cvssv3": {
"TM" : { "TM": {
"E" : "U", "E": "U",
"RC" : "C", "RC": "C",
"RL" : "O" "RL": "O"
}, },
"BM" : { "BM": {
"AV" : "N", "AV": "N",
"SCORE" : "4.300", "SCORE": "4.300",
"C" : "L", "C": "L",
"S" : "U", "S": "U",
"PR" : "L", "PR": "L",
"A" : "N", "A": "N",
"I" : "N", "I": "N",
"AC" : "L", "AC": "L",
"UI" : "N" "UI": "N"
} }
} }
} }

View File

@ -141,6 +141,11 @@
"refsource": "SUSE", "refsource": "SUSE",
"name": "openSUSE-SU-2019:1282", "name": "openSUSE-SU-2019:1282",
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html" "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html"
},
{
"refsource": "REDHAT",
"name": "RHSA-2019:0902",
"url": "https://access.redhat.com/errata/RHSA-2019:0902"
} }
] ]
} }

View File

@ -52,11 +52,6 @@
}, },
"references": { "references": {
"reference_data": [ "reference_data": [
{
"refsource": "CONFIRM",
"name": "https://github.com/aquaverde/aquarius-core/commit/d1dfa5b8280388a0b6f2f341f0681522dbea03b0",
"url": "https://github.com/aquaverde/aquarius-core/commit/d1dfa5b8280388a0b6f2f341f0681522dbea03b0"
},
{ {
"refsource": "MISC", "refsource": "MISC",
"name": "https://www.tryption.ch/de/2019/04/19/information-disclosure-im-aquarius-cms/", "name": "https://www.tryption.ch/de/2019/04/19/information-disclosure-im-aquarius-cms/",