mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-05-08 19:46:39 +00:00
"-Synchronized-Data."
This commit is contained in:
parent
a7ed0bf602
commit
ec8953ba3f
@ -1,105 +1,105 @@
|
||||
{
|
||||
"affects" : {
|
||||
"vendor" : {
|
||||
"vendor_data" : [
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"product" : {
|
||||
"product_data" : [
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"product_name" : "MQ",
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
"product_name": "MQ",
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value" : "9.0.2"
|
||||
"version_value": "9.0.2"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.0.3"
|
||||
"version_value": "9.0.3"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.0.4"
|
||||
"version_value": "9.0.4"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.0.5"
|
||||
"version_value": "9.0.5"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.1.0.0"
|
||||
"version_value": "9.1.0.0"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.1.0.1"
|
||||
"version_value": "9.1.0.1"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"vendor_name" : "IBM"
|
||||
"vendor_name": "IBM"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"title" : "IBM Security Bulletin 734457 (MQ)",
|
||||
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10734457",
|
||||
"refsource" : "CONFIRM",
|
||||
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10734457"
|
||||
"title": "IBM Security Bulletin 734457 (MQ)",
|
||||
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10734457",
|
||||
"refsource": "CONFIRM",
|
||||
"name": "https://www.ibm.com/support/docview.wss?uid=ibm10734457"
|
||||
},
|
||||
{
|
||||
"name" : "ibm-websphere-cve20181836-xss (150661)",
|
||||
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/150661",
|
||||
"title" : "X-Force Vulnerability Report",
|
||||
"refsource" : "XF"
|
||||
"name": "ibm-websphere-cve20181836-xss (150661)",
|
||||
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/150661",
|
||||
"title": "X-Force Vulnerability Report",
|
||||
"refsource": "XF"
|
||||
}
|
||||
]
|
||||
},
|
||||
"description" : {
|
||||
"description_data" : [
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value" : "IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661."
|
||||
"lang": "eng",
|
||||
"value": "IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150661."
|
||||
}
|
||||
]
|
||||
},
|
||||
"data_version" : "4.0",
|
||||
"problemtype" : {
|
||||
"problemtype_data" : [
|
||||
"data_version": "4.0",
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description" : [
|
||||
"description": [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value" : "Cross-Site Scripting"
|
||||
"lang": "eng",
|
||||
"value": "Cross-Site Scripting"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"impact" : {
|
||||
"cvssv3" : {
|
||||
"TM" : {
|
||||
"RL" : "O",
|
||||
"E" : "H",
|
||||
"RC" : "C"
|
||||
"impact": {
|
||||
"cvssv3": {
|
||||
"TM": {
|
||||
"RL": "O",
|
||||
"E": "H",
|
||||
"RC": "C"
|
||||
},
|
||||
"BM" : {
|
||||
"AC" : "L",
|
||||
"SCORE" : "5.400",
|
||||
"AV" : "N",
|
||||
"C" : "L",
|
||||
"UI" : "R",
|
||||
"PR" : "L",
|
||||
"I" : "L",
|
||||
"S" : "C",
|
||||
"A" : "N"
|
||||
"BM": {
|
||||
"AC": "L",
|
||||
"SCORE": "5.400",
|
||||
"AV": "N",
|
||||
"C": "L",
|
||||
"UI": "R",
|
||||
"PR": "L",
|
||||
"I": "L",
|
||||
"S": "C",
|
||||
"A": "N"
|
||||
}
|
||||
}
|
||||
},
|
||||
"data_format" : "MITRE",
|
||||
"CVE_data_meta" : {
|
||||
"STATE" : "PUBLIC",
|
||||
"DATE_PUBLIC" : "2019-03-14T00:00:00",
|
||||
"ASSIGNER" : "psirt@us.ibm.com",
|
||||
"ID" : "CVE-2018-1836"
|
||||
"data_format": "MITRE",
|
||||
"CVE_data_meta": {
|
||||
"STATE": "PUBLIC",
|
||||
"DATE_PUBLIC": "2019-03-14T00:00:00",
|
||||
"ASSIGNER": "psirt@us.ibm.com",
|
||||
"ID": "CVE-2018-1836"
|
||||
},
|
||||
"data_type" : "CVE"
|
||||
"data_type": "CVE"
|
||||
}
|
@ -1,45 +1,45 @@
|
||||
{
|
||||
"references" : {
|
||||
"reference_data" : [
|
||||
"references": {
|
||||
"reference_data": [
|
||||
{
|
||||
"refsource" : "CONFIRM",
|
||||
"url" : "https://www.ibm.com/support/docview.wss?uid=ibm10875860",
|
||||
"title" : "IBM Security Bulletin 875860 (DB2 for Linux, UNIX and Windows)",
|
||||
"name" : "https://www.ibm.com/support/docview.wss?uid=ibm10875860"
|
||||
"refsource": "CONFIRM",
|
||||
"url": "https://www.ibm.com/support/docview.wss?uid=ibm10875860",
|
||||
"title": "IBM Security Bulletin 875860 (DB2 for Linux, UNIX and Windows)",
|
||||
"name": "https://www.ibm.com/support/docview.wss?uid=ibm10875860"
|
||||
},
|
||||
{
|
||||
"title" : "X-Force Vulnerability Report",
|
||||
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/158014",
|
||||
"refsource" : "XF",
|
||||
"name" : "ibm-db2-cve20194094-priv-escalation (158014)"
|
||||
"title": "X-Force Vulnerability Report",
|
||||
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/158014",
|
||||
"refsource": "XF",
|
||||
"name": "ibm-db2-cve20194094-priv-escalation (158014)"
|
||||
}
|
||||
]
|
||||
},
|
||||
"affects" : {
|
||||
"vendor" : {
|
||||
"vendor_data" : [
|
||||
"affects": {
|
||||
"vendor": {
|
||||
"vendor_data": [
|
||||
{
|
||||
"vendor_name" : "IBM",
|
||||
"product" : {
|
||||
"product_data" : [
|
||||
"vendor_name": "IBM",
|
||||
"product": {
|
||||
"product_data": [
|
||||
{
|
||||
"version" : {
|
||||
"version_data" : [
|
||||
"version": {
|
||||
"version_data": [
|
||||
{
|
||||
"version_value" : "10.5"
|
||||
"version_value": "10.5"
|
||||
},
|
||||
{
|
||||
"version_value" : "10.1"
|
||||
"version_value": "10.1"
|
||||
},
|
||||
{
|
||||
"version_value" : "9.7"
|
||||
"version_value": "9.7"
|
||||
},
|
||||
{
|
||||
"version_value" : "11.1"
|
||||
"version_value": "11.1"
|
||||
}
|
||||
]
|
||||
},
|
||||
"product_name" : "DB2 for Linux, UNIX and Windows"
|
||||
"product_name": "DB2 for Linux, UNIX and Windows"
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -47,53 +47,53 @@
|
||||
]
|
||||
}
|
||||
},
|
||||
"impact" : {
|
||||
"cvssv3" : {
|
||||
"BM" : {
|
||||
"PR" : "N",
|
||||
"A" : "H",
|
||||
"S" : "U",
|
||||
"I" : "H",
|
||||
"AC" : "L",
|
||||
"SCORE" : "8.400",
|
||||
"C" : "H",
|
||||
"AV" : "L",
|
||||
"UI" : "N"
|
||||
"impact": {
|
||||
"cvssv3": {
|
||||
"BM": {
|
||||
"PR": "N",
|
||||
"A": "H",
|
||||
"S": "U",
|
||||
"I": "H",
|
||||
"AC": "L",
|
||||
"SCORE": "8.400",
|
||||
"C": "H",
|
||||
"AV": "L",
|
||||
"UI": "N"
|
||||
},
|
||||
"TM" : {
|
||||
"E" : "U",
|
||||
"RC" : "C",
|
||||
"RL" : "O"
|
||||
"TM": {
|
||||
"E": "U",
|
||||
"RC": "C",
|
||||
"RL": "O"
|
||||
}
|
||||
}
|
||||
},
|
||||
"problemtype" : {
|
||||
"problemtype_data" : [
|
||||
"problemtype": {
|
||||
"problemtype_data": [
|
||||
{
|
||||
"description" : [
|
||||
"description": [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value" : "Gain Privileges"
|
||||
"lang": "eng",
|
||||
"value": "Gain Privileges"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"description" : {
|
||||
"description_data" : [
|
||||
"description": {
|
||||
"description_data": [
|
||||
{
|
||||
"lang" : "eng",
|
||||
"value" : "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014."
|
||||
"lang": "eng",
|
||||
"value": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to root by loading a malicious shared library. IBM X-Force ID: 158014."
|
||||
}
|
||||
]
|
||||
},
|
||||
"data_version" : "4.0",
|
||||
"CVE_data_meta" : {
|
||||
"ASSIGNER" : "psirt@us.ibm.com",
|
||||
"ID" : "CVE-2019-4094",
|
||||
"STATE" : "PUBLIC",
|
||||
"DATE_PUBLIC" : "2019-03-12T00:00:00"
|
||||
"data_version": "4.0",
|
||||
"CVE_data_meta": {
|
||||
"ASSIGNER": "psirt@us.ibm.com",
|
||||
"ID": "CVE-2019-4094",
|
||||
"STATE": "PUBLIC",
|
||||
"DATE_PUBLIC": "2019-03-12T00:00:00"
|
||||
},
|
||||
"data_format" : "MITRE",
|
||||
"data_type" : "CVE"
|
||||
"data_format": "MITRE",
|
||||
"data_type": "CVE"
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user