Added CVE-2020-1699

This commit is contained in:
Tausif Siddiqui 2020-04-21 19:30:47 +05:30
parent 08e3a702cb
commit f84352b5ea
No known key found for this signature in database
GPG Key ID: 5B5F75D784880089

View File

@ -4,15 +4,71 @@
"data_version": "4.0",
"CVE_data_meta": {
"ID": "CVE-2020-1699",
"ASSIGNER": "cve@mitre.org",
"STATE": "RESERVED"
"ASSIGNER": "msiddiqu@redhat.com"
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "The Ceph Project",
"product": {
"product_data": [
{
"product_name": "ceph",
"version": {
"version_data": [
{
"version_value": "Fixed in 14.2.7"
},
{
"version_value": "Fixed in 15.1.0"
}
]
}
}
]
}
}
]
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-200"
}
]
}
]
},
"references": {
"reference_data": [
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699",
"refsource": "CONFIRM"
}
]
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value": "A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard."
}
]
},
"impact": {
"cvss": [
[
{
"vectorString": "7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
]
]
}
}