"-Synchronized-Data."

This commit is contained in:
CVE Team 2022-11-04 21:00:49 +00:00
parent 4a8c3b3c77
commit f55cfab6d5
No known key found for this signature in database
GPG Key ID: E3252B3D49582C98
6 changed files with 99 additions and 4 deletions

View File

@ -145,6 +145,11 @@
"refsource": "MISC",
"url": "https://support.apple.com/en-us/HT213487",
"name": "https://support.apple.com/en-us/HT213487"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
"url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
}
]
},

View File

@ -129,6 +129,11 @@
"refsource": "MISC",
"url": "https://support.apple.com/en-us/HT213490",
"name": "https://support.apple.com/en-us/HT213490"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
"url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
}
]
},

View File

@ -1,17 +1,87 @@
{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2022-38654",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "psirt@hcl.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"cweId": "CWE-200"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "HCL Software",
"product": {
"product_data": [
{
"product_name": "HCL Domino",
"version": {
"version_data": [
{
"version_value": "9, 10, 11, 12",
"version_affected": "="
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101017",
"refsource": "MISC",
"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101017"
}
]
},
"generator": {
"engine": "Vulnogram 0.1.0-dev"
},
"source": {
"discovery": "UNKNOWN"
},
"impact": {
"cvss": [
{
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
]
}

View File

@ -113,6 +113,11 @@
"refsource": "MISC",
"url": "https://support.apple.com/en-us/HT213491",
"name": "https://support.apple.com/en-us/HT213491"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
"url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
}
]
},

View File

@ -113,6 +113,11 @@
"refsource": "MISC",
"url": "https://support.apple.com/en-us/HT213491",
"name": "https://support.apple.com/en-us/HT213491"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
"url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
}
]
},

View File

@ -113,6 +113,11 @@
"refsource": "MISC",
"url": "https://support.apple.com/en-us/HT213491",
"name": "https://support.apple.com/en-us/HT213491"
},
{
"refsource": "MLIST",
"name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
"url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
}
]
},