admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-07-11 16:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2023-12-24T00:55:24.660789+00:00

Browse Source
This commit is contained in:
cad-safe-bot 2023-12-24 00:55:28 +00:00
parent 1c82256b8d
commit 73ec7cea1e
2 changed files with 69 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

63
CVE-2023/CVE-2023-70xx/CVE-2023-7090.json Normal file
View File

@ -0,0 +1,63 @@
{
"id": "CVE-2023-7090",
"sourceIdentifier": "secalert@redhat.com",
"published": "2023-12-23T23:15:07.560",
"lastModified": "2023-12-23T23:15:07.560",
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "secalert@redhat.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW",
"baseScore": 6.6,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "secalert@redhat.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2023-7090",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2255723",
"source": "secalert@redhat.com"
},
{
"url": "https://www.sudo.ws/releases/legacy/#1.8.28",
"source": "secalert@redhat.com"
}
]
}

12
README.md
View File

@ -9,13 +9,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2023-12-23T23:00:24.794733+00:00
2023-12-24T00:55:24.660789+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2023-12-23T21:15:07.883000+00:00
2023-12-23T23:15:07.560000+00:00
```
### Last Data Feed Release
@ -29,20 +29,20 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
234149
234150
```
### CVEs added in the last Commit
Recently added CVEs: `0`
Recently added CVEs: `1`
* [CVE-2023-7090](CVE-2023/CVE-2023-70xx/CVE-2023-7090.json) (`2023-12-23T23:15:07.560`)
### CVEs modified in the last Commit
Recently modified CVEs: `1`
Recently modified CVEs: `0`
* [CVE-2023-49594](CVE-2023/CVE-2023-495xx/CVE-2023-49594.json) (`2023-12-23T21:15:07.883`)
## Download and Usage