{ "CVE_data_type" : "CVE", "CVE_data_format" : "MITRE", "CVE_data_version" : "4.0", "CVE_data_numberOfCVEs" : "642", "CVE_data_timestamp" : "2019-07-20T00:00Z", "CVE_Items" : [ { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2012-0779", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.181.14", "version_affected" : "=" }, { "version_value" : "10.3.181.16", "version_affected" : "=" }, { "version_value" : "10.3.181.22", "version_affected" : "=" }, { "version_value" : "10.3.181.23", "version_affected" : "=" }, { "version_value" : "10.3.181.26", "version_affected" : "=" }, { "version_value" : "10.3.181.34", "version_affected" : "=" }, { "version_value" : "10.3.183.5", "version_affected" : "=" }, { "version_value" : "10.3.183.7", "version_affected" : "=" }, { "version_value" : "10.3.183.10", "version_affected" : "=" }, { "version_value" : "10.3.183.11", "version_affected" : "=" }, { "version_value" : "10.3.183.15", "version_affected" : "=" }, { "version_value" : "10.3.183.16", "version_affected" : "=" }, { "version_value" : "10.3.183.18", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "11.1.102.55", "version_affected" : "=" }, { "version_value" : "11.1.102.59", "version_affected" : "=" }, { "version_value" : "11.1.102.62", "version_affected" : "=" }, { "version_value" : "11.1.102.63", "version_affected" : "=" }, { "version_value" : "11.1.111.8", "version_affected" : "=" }, { "version_value" : "11.1.111.13", "version_affected" : "=" }, { "version_value" : "11.1.111.44", "version_affected" : "=" }, { "version_value" : "11.1.111.50", "version_affected" : "=" }, { "version_value" : "11.1.111.54", "version_affected" : "=" }, { "version_value" : "11.1.111.64", "version_affected" : "=" }, { "version_value" : "11.1.111.73", "version_affected" : "=" }, { "version_value" : "11.1.115.7", "version_affected" : "=" }, { "version_value" : "11.2.202.223", "version_affected" : "=" }, { "version_value" : "11.2.202.228", "version_affected" : "=" }, { "version_value" : "11.2.202.233", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00004.html", "name" : "SUSE-SU-2012:0592", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html", "name" : "openSUSE-SU-2012:0594", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://osvdb.org/81656", "name" : "81656", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2012-0688.html", "name" : "RHSA-2012:0688", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/49038", "name" : "49038", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/49096", "name" : "49096", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb12-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb12-09.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/53395", "name" : "53395", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securitytracker.com/id?1027023", "name" : "1027023", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/75383", "name" : "adobe-flash-objecttype-code-exec(75383)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an \"object confusion vulnerability,\" as exploited in the wild in May 2012." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.3", "versionEndExcluding" : "10.3.183.19" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.2", "versionEndIncluding" : "11.2.202.233" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.1", "versionEndIncluding" : "11.1.111.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0", "versionEndIncluding" : "2.3.7" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0", "versionEndIncluding" : "3.2.6" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.1", "versionEndIncluding" : "11.1.115.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0", "versionEndIncluding" : "4.4.4" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2012-05-04T19:55Z", "lastModifiedDate" : "2019-07-18T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2012-4820", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "java", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2.13", "version_affected" : "=" }, { "version_value" : "1.4.2.13.1", "version_affected" : "=" }, { "version_value" : "1.4.2.13.2", "version_affected" : "=" }, { "version_value" : "1.4.2.13.3", "version_affected" : "=" }, { "version_value" : "1.4.2.13.4", "version_affected" : "=" }, { "version_value" : "1.4.2.13.5", "version_affected" : "=" }, { "version_value" : "1.4.2.13.6", "version_affected" : "=" }, { "version_value" : "1.4.2.13.7", "version_affected" : "=" }, { "version_value" : "1.4.2.13.8", "version_affected" : "=" }, { "version_value" : "1.4.2.13.9", "version_affected" : "=" }, { "version_value" : "1.4.2.13.10", "version_affected" : "=" }, { "version_value" : "1.4.2.13.11", "version_affected" : "=" }, { "version_value" : "1.4.2.13.12", "version_affected" : "=" }, { "version_value" : "1.4.2.13.13", "version_affected" : "=" }, { "version_value" : "5.0.0.0", "version_affected" : "=" }, { "version_value" : "5.0.11.0", "version_affected" : "=" }, { "version_value" : "5.0.11.1", "version_affected" : "=" }, { "version_value" : "5.0.11.2", "version_affected" : "=" }, { "version_value" : "5.0.12.0", "version_affected" : "=" }, { "version_value" : "5.0.12.1", "version_affected" : "=" }, { "version_value" : "5.0.12.2", "version_affected" : "=" }, { "version_value" : "5.0.12.3", "version_affected" : "=" }, { "version_value" : "5.0.12.4", "version_affected" : "=" }, { "version_value" : "5.0.12.5", "version_affected" : "=" }, { "version_value" : "5.0.13.0", "version_affected" : "=" }, { "version_value" : "5.0.14.0", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1.0", "version_affected" : "=" }, { "version_value" : "6.0.2.0", "version_affected" : "=" }, { "version_value" : "6.0.3.0", "version_affected" : "=" }, { "version_value" : "6.0.4.0", "version_affected" : "=" }, { "version_value" : "6.0.5.0", "version_affected" : "=" }, { "version_value" : "6.0.6.0", "version_affected" : "=" }, { "version_value" : "6.0.7.0", "version_affected" : "=" }, { "version_value" : "6.0.8.0", "version_affected" : "=" }, { "version_value" : "6.0.8.1", "version_affected" : "=" }, { "version_value" : "6.0.9.0", "version_affected" : "=" }, { "version_value" : "6.0.9.1", "version_affected" : "=" }, { "version_value" : "6.0.9.2", "version_affected" : "=" }, { "version_value" : "6.0.10.0", "version_affected" : "=" }, { "version_value" : "6.0.10.1", "version_affected" : "=" }, { "version_value" : "6.0.11.0", "version_affected" : "=" }, { "version_value" : "7.0.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1.0", "version_affected" : "=" }, { "version_value" : "7.0.2.0", "version_affected" : "=" } ] } }, { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.0.2.2", "version_affected" : "=" }, { "version_value" : "8.0.2.3", "version_affected" : "=" }, { "version_value" : "8.0.2.4", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.2.4", "version_affected" : "=" }, { "version_value" : "8.5.3.0", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" } ] } }, { "product_name" : "lotus_notes", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.2.0", "version_affected" : "=" }, { "version_value" : "8.0.2.1", "version_affected" : "=" }, { "version_value" : "8.0.2.2", "version_affected" : "=" }, { "version_value" : "8.0.2.3", "version_affected" : "=" }, { "version_value" : "8.0.2.4", "version_affected" : "=" }, { "version_value" : "8.0.2.5", "version_affected" : "=" }, { "version_value" : "8.0.2.6", "version_affected" : "=" }, { "version_value" : "8.5", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.1.0", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.1.4", "version_affected" : "=" }, { "version_value" : "8.5.1.5", "version_affected" : "=" }, { "version_value" : "8.5.2.0", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.2.2", "version_affected" : "=" }, { "version_value" : "8.5.2.3", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" } ] } }, { "product_name" : "lotus_notes_sametime", "version" : { "version_data" : [ { "version_value" : "8.0.80407", "version_affected" : "=" }, { "version_value" : "8.0.80822", "version_affected" : "=" }, { "version_value" : "8.5.1.20100709-1631", "version_affected" : "=" } ] } }, { "product_name" : "lotus_notes_traveler", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.1.2", "version_affected" : "=" }, { "version_value" : "8.0.1.3", "version_affected" : "=" }, { "version_value" : "8.5.0.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" }, { "version_value" : "8.5.0.2", "version_affected" : "=" }, { "version_value" : "8.5.1.1", "version_affected" : "=" }, { "version_value" : "8.5.1.2", "version_affected" : "=" }, { "version_value" : "8.5.1.3", "version_affected" : "=" }, { "version_value" : "8.5.2.1", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.3.1", "version_affected" : "=" }, { "version_value" : "8.5.3.2", "version_affected" : "=" }, { "version_value" : "8.5.3.3", "version_affected" : "=" } ] } }, { "product_name" : "rational_change", "version" : { "version_data" : [ { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" } ] } }, { "product_name" : "rational_host_on-demand", "version" : { "version_data" : [ { "version_value" : "1.6.0.12", "version_affected" : "=" }, { "version_value" : "8.0.8.0", "version_affected" : "=" }, { "version_value" : "9.0.8.0", "version_affected" : "=" }, { "version_value" : "10.0.9.0", "version_affected" : "=" }, { "version_value" : "10.0.10.0", "version_affected" : "=" }, { "version_value" : "11.0.3.0", "version_affected" : "=" }, { "version_value" : "11.0.4.0", "version_affected" : "=" }, { "version_value" : "11.0.5.0", "version_affected" : "=" }, { "version_value" : "11.0.5.1", "version_affected" : "=" }, { "version_value" : "11.0.6.0", "version_affected" : "=" }, { "version_value" : "11.0.6.1", "version_affected" : "=" } ] } }, { "product_name" : "service_delivery_manager", "version" : { "version_data" : [ { "version_value" : "7.2.1.0", "version_affected" : "=" }, { "version_value" : "7.2.2.0", "version_affected" : "=" } ] } }, { "product_name" : "smart_analytics_system_5600_software", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "9.7", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_monitoring", "version" : { "version_data" : [ { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.0.7", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.0.2", "version_affected" : "=" }, { "version_value" : "6.2.0.3", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.1.0", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.0", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.3", "version_affected" : "=" }, { "version_value" : "6.2.2.4", "version_affected" : "=" }, { "version_value" : "6.2.2.5", "version_affected" : "=" }, { "version_value" : "6.2.2.6", "version_affected" : "=" }, { "version_value" : "6.2.2.7", "version_affected" : "=" }, { "version_value" : "6.2.2.8", "version_affected" : "=" }, { "version_value" : "6.2.2.9", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.3.0", "version_affected" : "=" }, { "version_value" : "6.2.3.1", "version_affected" : "=" }, { "version_value" : "6.2.3.2", "version_affected" : "=" } ] } }, { "product_name" : "tivoli_remote_control", "version" : { "version_data" : [ { "version_value" : "5.1.2", "version_affected" : "=" } ] } }, { "product_name" : "websphere_real_time", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "smart_analytics_system_5600", "version" : { "version_data" : [ { "version_value" : "7200", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "tivoli_storage_productivity_center", "product" : { "product_data" : [ { "product_name" : "5.0", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "5.1", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "5.1.1", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2012-1465.html", "name" : "RHSA-2012:1465", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2012-1466.html", "name" : "RHSA-2012:1466", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2012-1467.html", "name" : "RHSA-2012:1467", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1455.html", "name" : "RHSA-2013:1455", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2013-1456.html", "name" : "RHSA-2013:1456", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://seclists.org/bugtraq/2012/Sep/38", "name" : "20120911 [SE-2012-01] Security vulnerabilities in IBM Java", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51326", "name" : "51326", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51327", "name" : "51327", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51328", "name" : "51328", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51393", "name" : "51393", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/51634", "name" : "51634", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/55495", "name" : "55495", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IV29654", "name" : "IV29654", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21615705", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21615705", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21615800", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21615800", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616490", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616490", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616594", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616594", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616616", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616616", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616617", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616617", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616652", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616652", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616708", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21616708", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21621154", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21621154", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631786", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21631786", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/78764", "name" : "ibm-java-invoke-code-execution(78764)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www-304.ibm.com/support/docview.wss?uid=swg21616546", "name" : "https://www-304.ibm.com/support/docview.wss?uid=swg21616546", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to \"insecure use of the java.lang.reflect.Method invoke() method.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.4.2", "versionEndIncluding" : "1.4.2.13.13" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0.0.0", "versionEndIncluding" : "5.0.14.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.0.0.0", "versionEndIncluding" : "6.0.11.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.0.0.0", "versionEndIncluding" : "7.0.2.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.0.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes:8.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80407:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_sametime:8.0.80822:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_sametime:8.5.1.20100709-1631:*:*:*:advanced_embedded:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_notes_traveler:8.5.3.3:interim_fix_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_change:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_change:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_change:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_change:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:1.6.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:8.0.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:9.0.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:10.0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:10.0.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:rational_host_on-demand:11.0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:service_delivery_manager:7.2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:service_delivery_manager:7.2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:smart_analytics_system_5600_software:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:smart_analytics_system_5600_software:9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_remote_control:5.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_real_time:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:websphere_real_time:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tivoli_storage_productivity_center:5.0:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tivoli_storage_productivity_center:5.1:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tivoli_storage_productivity_center:5.1.1:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:ibm:smart_analytics_system_5600:7200:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-01-11T00:55Z", "lastModifiedDate" : "2019-07-18T12:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-0733", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "corel", "product" : { "product_data" : [ { "product_name" : "paintshop_pro_x5", "version" : { "version_data" : [ { "version_value" : "15.2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "paintshop_pro_x6", "version" : { "version_data" : [ { "version_value" : "16.0.0.113", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/98163", "name" : "98163", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://secunia.com/advisories/53618", "name" : "53618", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/62836", "name" : "62836", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/87763", "name" : "corel-paintshop-cve20130733-code-exec(87763)", "refsource" : "XF", "tags" : [ "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Untrusted search path vulnerability in Corel PaintShop Pro X5 and X6 16.0.0.113, 15.2.0.2, and earlier allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jpg file." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/426.html\n\n\"CWE-426: Untrusted Search Path\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corel:paintshop_pro_x5:*:*:*:*:*:*:*:*", "versionEndIncluding" : "15.2.0.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:corel:paintshop_pro_x6:*:*:*:*:*:*:*:*", "versionEndIncluding" : "16.0.0.113" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2014-06-05T20:55Z", "lastModifiedDate" : "2019-07-18T12:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-2751", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netgear", "product" : { "product_data" : [ { "product_name" : "raidiator", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.17", "version_affected" : "=" }, { "version_value" : "4.2.22", "version_affected" : "=" }, { "version_value" : "4.2.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/123726/Netgear-ReadyNAS-Complete-System-Takeover.html", "name" : "http://packetstormsecurity.com/files/123726/Netgear-ReadyNAS-Complete-System-Takeover.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.exploit-db.com/exploits/29815", "name" : "29815", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.osvdb.org/98826", "name" : "98826", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.readynas.com/?p=7002", "name" : "http://www.readynas.com/?p=7002", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.tripwire.com/register/security-advisory-netgear-readynas/", "name" : "http://www.tripwire.com/register/security-advisory-netgear-readynas/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/", "name" : "http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the \"forgot password workflow.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*", "versionStartIncluding" : "4.1", "versionEndExcluding" : "4.1.12" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*", "versionStartIncluding" : "4.2", "versionEndExcluding" : "4.2.24" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-12-12T18:55Z", "lastModifiedDate" : "2019-07-18T12:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2013-2752", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netgear", "product" : { "product_data" : [ { "product_name" : "raidiator", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.17", "version_affected" : "=" }, { "version_value" : "4.2.22", "version_affected" : "=" }, { "version_value" : "4.2.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.osvdb.org/98825", "name" : "98825", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.readynas.com/?p=7002", "name" : "http://www.readynas.com/?p=7002", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.tripwire.com/register/security-advisory-netgear-readynas/", "name" : "http://www.tripwire.com/register/security-advisory-netgear-readynas/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/", "name" : "http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*", "versionStartIncluding" : "4.1", "versionEndExcluding" : "4.1.12" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*", "versionStartIncluding" : "4.2", "versionEndExcluding" : "4.2.24" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2013-12-12T18:55Z", "lastModifiedDate" : "2019-07-18T12:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-10374", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://petsymposium.org/2019/files/papers/issue3/popets-2019-0036.pdf", "name" : "https://petsymposium.org/2019/files/papers/issue3/popets-2019-0036.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://twitter.com/TedOnPrivacy/status/1151390589990187008", "name" : "https://twitter.com/TedOnPrivacy/status/1151390589990187008", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to \"permanent trackability\" and \"considerable privacy concerns\" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low Energy (BLE) advertising packets with a TxAdd flag indicating random addresses, but the addresses remain constant. If devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary can determine whether the same device has entered one of these locations." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T13:15Z", "lastModifiedDate" : "2019-07-15T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-1983", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cybozu", "product" : { "product_data" : [ { "product_name" : "remote_service_manager", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "<=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cs.cybozu.co.jp/information/20130317notice01.php", "name" : "http://cs.cybozu.co.jp/information/20130317notice01.php", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://jvn.jp/en/jp/JVN10319260/index.html", "name" : "JVN#10319260", "refsource" : "JVN", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000039", "name" : "JVNDB-2014-000039", "refsource" : "JVNDB", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of service (CPU consumption) via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cybozu:remote_service_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cybozu:remote_service_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndIncluding" : "3.1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-04-19T19:55Z", "lastModifiedDate" : "2019-07-16T12:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-1984", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cybozu", "product" : { "product_data" : [ { "product_name" : "remote_service_manager", "version" : { "version_data" : [ { "version_value" : "2.3.0", "version_affected" : "<=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cs.cybozu.co.jp/information/20130317notice02.php", "name" : "http://cs.cybozu.co.jp/information/20130317notice02.php", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://jvn.jp/en/jp/JVN00058727/index.html", "name" : "JVN#00058727", "refsource" : "JVN", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000040", "name" : "JVNDB-2014-000040", "refsource" : "JVNDB", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Session fixation vulnerability in the management screen in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to hijack web sessions via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cybozu:remote_service_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cybozu:remote_service_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndIncluding" : "3.1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-04-19T19:55Z", "lastModifiedDate" : "2019-07-16T12:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-2681", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zend", "product" : { "product_data" : [ { "product_name" : "zend_framework", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.8", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.9.7", "version_affected" : "=" }, { "version_value" : "1.9.8", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.10.5", "version_affected" : "=" }, { "version_value" : "1.10.6", "version_affected" : "=" }, { "version_value" : "1.10.7", "version_affected" : "=" }, { "version_value" : "1.10.8", "version_affected" : "=" }, { "version_value" : "1.10.9", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" }, { "version_value" : "1.11.11", "version_affected" : "=" }, { "version_value" : "1.11.12", "version_affected" : "=" }, { "version_value" : "1.11.13", "version_affected" : "=" }, { "version_value" : "1.11.15", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" } ] } }, { "product_name" : "zendopenid", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendrest", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_amazon", "version" : { "version_data" : [ { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_api", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_audioscrobbler", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_nirvanix", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_slideshare", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_technorati", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_windowsazure", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://advisories.mageia.org/MGASA-2014-0151.html", "name" : "http://advisories.mageia.org/MGASA-2014-0151.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://framework.zend.com/security/advisory/ZF2014-01", "name" : "http://framework.zend.com/security/advisory/ZF2014-01", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://seclists.org/oss-sec/2014/q2/0", "name" : "[oss-security] 20140331 Re: CVE requests: Zend Framework issues fixed in ZF2014-01 and ZF2014-02", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2015/dsa-3265", "name" : "DSA-3265", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2014:072", "name" : "MDVSA-2014:072", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/66358", "name" : "66358", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, ZendService_Amazon before 2.0.3, and ZendService_Api before 1.0.0 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack. NOTE: this issue exists because of an incomplete fix for CVE-2012-5657." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendrest:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.1.0", "versionEndExcluding" : "2.1.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.2.0", "versionEndExcluding" : "2.2.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_slideshare:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_api:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_audioscrobbler:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_amazon:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_technorati:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_windowsazure:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendopenid:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_nirvanix:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-16T00:59Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-2682", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zend", "product" : { "product_data" : [ { "product_name" : "zend_framework", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.8", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.9.7", "version_affected" : "=" }, { "version_value" : "1.9.8", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.10.5", "version_affected" : "=" }, { "version_value" : "1.10.6", "version_affected" : "=" }, { "version_value" : "1.10.7", "version_affected" : "=" }, { "version_value" : "1.10.8", "version_affected" : "=" }, { "version_value" : "1.10.9", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" }, { "version_value" : "1.11.11", "version_affected" : "=" }, { "version_value" : "1.11.12", "version_affected" : "=" }, { "version_value" : "1.11.13", "version_affected" : "=" }, { "version_value" : "1.11.15", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" } ] } }, { "product_name" : "zendopenid", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendrest", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_amazon", "version" : { "version_data" : [ { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_api", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_audioscrobbler", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_nirvanix", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_slideshare", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_technorati", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_windowsazure", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://advisories.mageia.org/MGASA-2014-0151.html", "name" : "http://advisories.mageia.org/MGASA-2014-0151.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://framework.zend.com/security/advisory/ZF2014-01", "name" : "http://framework.zend.com/security/advisory/ZF2014-01", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://seclists.org/oss-sec/2014/q2/0", "name" : "[oss-security] 20140331 CVE requests: Zend Framework issues fixed in ZF2014-01 and ZF2014-02", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2015/dsa-3265", "name" : "DSA-3265", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2014:072", "name" : "MDVSA-2014:072", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/66358", "name" : "66358", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, ZendService_Amazon before 2.0.3, and ZendService_Api before 1.0.0, when PHP-FPM is used, does not properly share the libxml_disable_entity_loader setting between threads, which might allow remote attackers to conduct XML External Entity (XXE) attacks via an XML external entity declaration in conjunction with an entity reference. NOTE: this issue exists because of an incomplete fix for CVE-2012-5657." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendrest:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.1.0", "versionEndExcluding" : "2.1.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.2.0", "versionEndExcluding" : "2.2.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_slideshare:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_api:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_audioscrobbler:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_amazon:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_technorati:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_windowsazure:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendopenid:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_nirvanix:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-16T00:59Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-2683", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zend", "product" : { "product_data" : [ { "product_name" : "zend_framework", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.8", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.9.7", "version_affected" : "=" }, { "version_value" : "1.9.8", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.10.5", "version_affected" : "=" }, { "version_value" : "1.10.6", "version_affected" : "=" }, { "version_value" : "1.10.7", "version_affected" : "=" }, { "version_value" : "1.10.8", "version_affected" : "=" }, { "version_value" : "1.10.9", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" }, { "version_value" : "1.11.11", "version_affected" : "=" }, { "version_value" : "1.11.12", "version_affected" : "=" }, { "version_value" : "1.11.13", "version_affected" : "=" }, { "version_value" : "1.11.15", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" } ] } }, { "product_name" : "zendopenid", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendrest", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_amazon", "version" : { "version_data" : [ { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_api", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_audioscrobbler", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_nirvanix", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_slideshare", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_technorati", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } }, { "product_name" : "zendservice_windowsazure", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-17" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://advisories.mageia.org/MGASA-2014-0151.html", "name" : "http://advisories.mageia.org/MGASA-2014-0151.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://framework.zend.com/security/advisory/ZF2014-01", "name" : "http://framework.zend.com/security/advisory/ZF2014-01", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://seclists.org/oss-sec/2014/q2/0", "name" : "[oss-security] 20140331 CVE requests: Zend Framework issues fixed in ZF2014-01 and ZF2014-02", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2015/dsa-3265", "name" : "DSA-3265", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2014:072", "name" : "MDVSA-2014:072", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/66358", "name" : "66358", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure before 2.0.2, ZendService_Amazon before 2.0.3, and ZendService_Api before 1.0.0 allow remote attackers to cause a denial of service (CPU consumption) via (1) recursive or (2) circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity Expansion (XEE) attack. NOTE: this issue exists because of an incomplete fix for CVE-2012-6532." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendrest:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.1.0", "versionEndExcluding" : "2.1.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zend_framework:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.2.0", "versionEndExcluding" : "2.2.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_slideshare:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_api:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_audioscrobbler:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_amazon:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_technorati:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_windowsazure:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendopenid:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zend:zendservice_nirvanix:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-16T00:59Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-3248", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "puppet", "product" : { "product_data" : [ { "product_name" : "facter", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" } ] } }, { "product_name" : "hiera", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" } ] } }, { "product_name" : "marionette_collective", "version" : { "version_data" : [ { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.4.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.4.7", "version_affected" : "=" }, { "version_value" : "0.4.8", "version_affected" : "=" }, { "version_value" : "0.4.9", "version_affected" : "=" }, { "version_value" : "0.4.10", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" } ] } }, { "product_name" : "puppet", "version" : { "version_data" : [ { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.11.1", "version_affected" : "=" }, { "version_value" : "0.11.2", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.13.2", "version_affected" : "=" }, { "version_value" : "0.13.3", "version_affected" : "=" }, { "version_value" : "0.13.4", "version_affected" : "=" }, { "version_value" : "0.13.5", "version_affected" : "=" }, { "version_value" : "0.13.6", "version_affected" : "=" }, { "version_value" : "0.14.0", "version_affected" : "=" }, { "version_value" : "0.14.1", "version_affected" : "=" }, { "version_value" : "0.15.0", "version_affected" : "=" }, { "version_value" : "0.15.1", "version_affected" : "=" }, { "version_value" : "0.15.2", "version_affected" : "=" }, { "version_value" : "0.16.0", "version_affected" : "=" }, { "version_value" : "0.16.1", "version_affected" : "=" }, { "version_value" : "0.16.2", "version_affected" : "=" }, { "version_value" : "0.16.3", "version_affected" : "=" }, { "version_value" : "0.16.4", "version_affected" : "=" }, { "version_value" : "0.16.5", "version_affected" : "=" }, { "version_value" : "0.17.0", "version_affected" : "=" }, { "version_value" : "0.17.1", "version_affected" : "=" }, { "version_value" : "0.17.2", "version_affected" : "=" }, { "version_value" : "0.18.0", "version_affected" : "=" }, { "version_value" : "0.18.1", "version_affected" : "=" }, { "version_value" : "0.18.2", "version_affected" : "=" }, { "version_value" : "0.18.3", "version_affected" : "=" }, { "version_value" : "0.18.4", "version_affected" : "=" }, { "version_value" : "0.19.1", "version_affected" : "=" }, { "version_value" : "0.19.2", "version_affected" : "=" }, { "version_value" : "0.19.3", "version_affected" : "=" }, { "version_value" : "0.20.0", "version_affected" : "=" }, { "version_value" : "0.20.1", "version_affected" : "=" }, { "version_value" : "0.22.0", "version_affected" : "=" }, { "version_value" : "0.22.1", "version_affected" : "=" }, { "version_value" : "0.22.2", "version_affected" : "=" }, { "version_value" : "0.22.3", "version_affected" : "=" }, { "version_value" : "0.22.4", "version_affected" : "=" }, { "version_value" : "0.23.0", "version_affected" : "=" }, { "version_value" : "0.23.1", "version_affected" : "=" }, { "version_value" : "0.23.2", "version_affected" : "=" }, { "version_value" : "0.24.0", "version_affected" : "=" }, { "version_value" : "0.24.1", "version_affected" : "=" }, { "version_value" : "0.24.2", "version_affected" : "=" }, { "version_value" : "0.24.3", "version_affected" : "=" }, { "version_value" : "0.24.4", "version_affected" : "=" }, { "version_value" : "0.24.5", "version_affected" : "=" }, { "version_value" : "0.24.6", "version_affected" : "=" }, { "version_value" : "0.24.7", "version_affected" : "=" }, { "version_value" : "0.24.8", "version_affected" : "=" }, { "version_value" : "0.24.9", "version_affected" : "=" }, { "version_value" : "0.25.0", "version_affected" : "=" }, { "version_value" : "0.25.1", "version_affected" : "=" }, { "version_value" : "0.25.2", "version_affected" : "=" }, { "version_value" : "0.25.3", "version_affected" : "=" }, { "version_value" : "0.25.4", "version_affected" : "=" }, { "version_value" : "0.25.5", "version_affected" : "=" }, { "version_value" : "0.25.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.7.12", "version_affected" : "=" }, { "version_value" : "2.7.13", "version_affected" : "=" }, { "version_value" : "2.7.14", "version_affected" : "=" }, { "version_value" : "2.7.15", "version_affected" : "=" }, { "version_value" : "2.7.16", "version_affected" : "=" }, { "version_value" : "2.7.17", "version_affected" : "=" }, { "version_value" : "2.7.18", "version_affected" : "=" }, { "version_value" : "2.7.19", "version_affected" : "=" }, { "version_value" : "2.7.20", "version_affected" : "=" }, { "version_value" : "2.7.21", "version_affected" : "=" }, { "version_value" : "2.7.22", "version_affected" : "=" }, { "version_value" : "2.7.23", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" } ] } }, { "product_name" : "puppet_enterprise", "version" : { "version_data" : [ { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.8.3", "version_affected" : "=" }, { "version_value" : "2.8.4", "version_affected" : "=" }, { "version_value" : "2.8.5", "version_affected" : "=" }, { "version_value" : "2.8.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "puppetlabs", "product" : { "product_data" : [ { "product_name" : "facter", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" }, { "version_value" : "1.6.10", "version_affected" : "=" }, { "version_value" : "1.6.11", "version_affected" : "=" }, { "version_value" : "1.6.12", "version_affected" : "=" }, { "version_value" : "1.6.13", "version_affected" : "=" }, { "version_value" : "1.6.14", "version_affected" : "=" }, { "version_value" : "1.6.15", "version_affected" : "=" }, { "version_value" : "1.6.16", "version_affected" : "=" }, { "version_value" : "1.6.17", "version_affected" : "=" }, { "version_value" : "1.6.18", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-17" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://puppetlabs.com/security/cve/cve-2014-3248", "name" : "http://puppetlabs.com/security/cve/cve-2014-3248", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/", "name" : "http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/", "refsource" : "MISC", "tags" : [ "Exploit", "Technical Description" ] }, { "url" : "http://secunia.com/advisories/59197", "name" : "59197", "refsource" : "SECUNIA", "tags" : [ "Technical Description" ] }, { "url" : "http://secunia.com/advisories/59200", "name" : "59200", "refsource" : "SECUNIA", "tags" : [ "Technical Description" ] }, { "url" : "http://www.securityfocus.com/bid/68035", "name" : "68035", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:facter:2.0.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppetlabs:facter:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.6.0", "versionEndIncluding" : "1.6.18" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:marionette_collective:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.5.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:hiera:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.3.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.7.26" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.6.0", "versionEndExcluding" : "3.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.8.0", "versionEndExcluding" : "2.8.7" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.2 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-16T17:59Z", "lastModifiedDate" : "2019-07-16T12:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-3798", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "citrix", "product" : { "product_data" : [ { "product_name" : "xenserver", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/58455", "name" : "58455", "refsource" : "SECUNIA", "tags" : [ "Permissions Required", "Third Party Advisory" ] }, { "url" : "http://support.citrix.com/article/CTX140814", "name" : "http://support.citrix.com/article/CTX140814", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/67693", "name" : "67693", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securitytracker.com/id/1030304", "name" : "1030304", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:xenserver:6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:xenserver:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:xenserver:6.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.5, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-15T19:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8413", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.2.0", "version_affected" : "=" }, { "version_value" : "12.3.0", "version_affected" : "=" }, { "version_value" : "12.3.1", "version_affected" : "=" }, { "version_value" : "12.3.2", "version_affected" : "=" }, { "version_value" : "12.4.0", "version_affected" : "=" }, { "version_value" : "12.5.0", "version_affected" : "=" }, { "version_value" : "12.5.1", "version_affected" : "=" }, { "version_value" : "12.6.0", "version_affected" : "=" }, { "version_value" : "12.6.1", "version_affected" : "=" }, { "version_value" : "12.7.0", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2014-013.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2014-013.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.7.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-24T15:59Z", "lastModifiedDate" : "2019-07-16T12:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8415", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.2.0", "version_affected" : "=" }, { "version_value" : "12.3.0", "version_affected" : "=" }, { "version_value" : "12.3.1", "version_affected" : "=" }, { "version_value" : "12.3.2", "version_affected" : "=" }, { "version_value" : "12.4.0", "version_affected" : "=" }, { "version_value" : "12.5.0", "version_affected" : "=" }, { "version_value" : "12.5.1", "version_affected" : "=" }, { "version_value" : "12.6.0", "version_affected" : "=" }, { "version_value" : "12.6.1", "version_affected" : "=" }, { "version_value" : "12.7.0", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2014-015.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2014-015.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a cancel request for a SIP session with a queued action to (1) answer a session or (2) send ringing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.7.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-24T15:59Z", "lastModifiedDate" : "2019-07-16T12:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8416", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.2.0", "version_affected" : "=" }, { "version_value" : "12.3.0", "version_affected" : "=" }, { "version_value" : "12.3.1", "version_affected" : "=" }, { "version_value" : "12.3.2", "version_affected" : "=" }, { "version_value" : "12.4.0", "version_affected" : "=" }, { "version_value" : "12.5.0", "version_affected" : "=" }, { "version_value" : "12.5.1", "version_affected" : "=" }, { "version_value" : "12.6.0", "version_affected" : "=" }, { "version_value" : "12.6.1", "version_affected" : "=" }, { "version_value" : "12.7.0", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2014-016.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2014-016.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.7.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-24T15:59Z", "lastModifiedDate" : "2019-07-16T12:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8417", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" }, { "version_value" : "11.5.1", "version_affected" : "=" }, { "version_value" : "11.6.0", "version_affected" : "=" }, { "version_value" : "11.6.1", "version_affected" : "=" }, { "version_value" : "11.7.0", "version_affected" : "=" }, { "version_value" : "11.8.0", "version_affected" : "=" }, { "version_value" : "11.8.1", "version_affected" : "=" }, { "version_value" : "11.9.0", "version_affected" : "=" }, { "version_value" : "11.10.0", "version_affected" : "=" }, { "version_value" : "11.10.1", "version_affected" : "=" }, { "version_value" : "11.10.2", "version_affected" : "=" }, { "version_value" : "11.11.0", "version_affected" : "=" }, { "version_value" : "11.12.0", "version_affected" : "=" }, { "version_value" : "11.12.1", "version_affected" : "=" }, { "version_value" : "11.13.0", "version_affected" : "=" }, { "version_value" : "11.13.1", "version_affected" : "=" }, { "version_value" : "11.14.0", "version_affected" : "=" }, { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.2.0", "version_affected" : "=" }, { "version_value" : "12.3.0", "version_affected" : "=" }, { "version_value" : "12.3.1", "version_affected" : "=" }, { "version_value" : "12.3.2", "version_affected" : "=" }, { "version_value" : "12.4.0", "version_affected" : "=" }, { "version_value" : "12.5.0", "version_affected" : "=" }, { "version_value" : "12.5.1", "version_affected" : "=" }, { "version_value" : "12.6.0", "version_affected" : "=" }, { "version_value" : "12.6.1", "version_affected" : "=" }, { "version_value" : "12.7.0", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" } ] } }, { "product_name" : "certified_asterisk", "version" : { "version_data" : [ { "version_value" : "11.6", "version_affected" : "=" }, { "version_value" : "11.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2014-017.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2014-017.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 11.6 before 11.6-cert8 allows remote authenticated users to (1) gain privileges via vectors related to an external protocol to the CONFBRIDGE dialplan function or (2) execute arbitrary system commands via a crafted ConfbridgeStartRecord AMI action." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.14.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.7.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-24T15:59Z", "lastModifiedDate" : "2019-07-16T12:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8418", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.1.1", "version_affected" : "=" }, { "version_value" : "1.8.1.2", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.2.1", "version_affected" : "=" }, { "version_value" : "1.8.2.2", "version_affected" : "=" }, { "version_value" : "1.8.2.3", "version_affected" : "=" }, { "version_value" : "1.8.2.4", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.3.1", "version_affected" : "=" }, { "version_value" : "1.8.3.2", "version_affected" : "=" }, { "version_value" : "1.8.3.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.4.1", "version_affected" : "=" }, { "version_value" : "1.8.4.2", "version_affected" : "=" }, { "version_value" : "1.8.4.3", "version_affected" : "=" }, { "version_value" : "1.8.4.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.8.5.0", "version_affected" : "=" }, { "version_value" : "1.8.5.1", "version_affected" : "=" }, { "version_value" : "1.8.6.0", "version_affected" : "=" }, { "version_value" : "1.8.7.0", "version_affected" : "=" }, { "version_value" : "1.8.7.1", "version_affected" : "=" }, { "version_value" : "1.8.7.2", "version_affected" : "=" }, { "version_value" : "1.8.8.0", "version_affected" : "=" }, { "version_value" : "1.8.8.1", "version_affected" : "=" }, { "version_value" : "1.8.8.2", "version_affected" : "=" }, { "version_value" : "1.8.9.0", "version_affected" : "=" }, { "version_value" : "1.8.9.1", "version_affected" : "=" }, { "version_value" : "1.8.9.2", "version_affected" : "=" }, { "version_value" : "1.8.9.3", "version_affected" : "=" }, { "version_value" : "1.8.10.0", "version_affected" : "=" }, { "version_value" : "1.8.10.1", "version_affected" : "=" }, { "version_value" : "1.8.11.0", "version_affected" : "=" }, { "version_value" : "1.8.11.1", "version_affected" : "=" }, { "version_value" : "1.8.12", "version_affected" : "=" }, { "version_value" : "1.8.12.0", "version_affected" : "=" }, { "version_value" : "1.8.12.1", "version_affected" : "=" }, { "version_value" : "1.8.12.2", "version_affected" : "=" }, { "version_value" : "1.8.13.0", "version_affected" : "=" }, { "version_value" : "1.8.13.1", "version_affected" : "=" }, { "version_value" : "1.8.14.0", "version_affected" : "=" }, { "version_value" : "1.8.14.1", "version_affected" : "=" }, { "version_value" : "1.8.15.0", "version_affected" : "=" }, { "version_value" : "1.8.15.1", "version_affected" : "=" }, { "version_value" : "1.8.16.0", "version_affected" : "=" }, { "version_value" : "1.8.17.0", "version_affected" : "=" }, { "version_value" : "1.8.18.0", "version_affected" : "=" }, { "version_value" : "1.8.18.1", "version_affected" : "=" }, { "version_value" : "1.8.19.0", "version_affected" : "=" }, { "version_value" : "1.8.19.1", "version_affected" : "=" }, { "version_value" : "1.8.20.0", "version_affected" : "=" }, { "version_value" : "1.8.20.1", "version_affected" : "=" }, { "version_value" : "1.8.20.2", "version_affected" : "=" }, { "version_value" : "1.8.21.0", "version_affected" : "=" }, { "version_value" : "1.8.22.0", "version_affected" : "=" }, { "version_value" : "1.8.23.0", "version_affected" : "=" }, { "version_value" : "1.8.23.1", "version_affected" : "=" }, { "version_value" : "1.8.24.0", "version_affected" : "=" }, { "version_value" : "1.8.24.1", "version_affected" : "=" }, { "version_value" : "1.8.25.0", "version_affected" : "=" }, { "version_value" : "1.8.26.0", "version_affected" : "=" }, { "version_value" : "1.8.26.1", "version_affected" : "=" }, { "version_value" : "1.8.27.0", "version_affected" : "=" }, { "version_value" : "1.8.28.0", "version_affected" : "=" }, { "version_value" : "1.8.28.1", "version_affected" : "=" }, { "version_value" : "1.8.28.2", "version_affected" : "=" }, { "version_value" : "1.8.29.0", "version_affected" : "=" }, { "version_value" : "1.8.30.0", "version_affected" : "=" }, { "version_value" : "1.8.31.0", "version_affected" : "=" }, { "version_value" : "1.8.31.1", "version_affected" : "=" }, { "version_value" : "1.8.32.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" }, { "version_value" : "11.5.1", "version_affected" : "=" }, { "version_value" : "11.6.0", "version_affected" : "=" }, { "version_value" : "11.6.1", "version_affected" : "=" }, { "version_value" : "11.7.0", "version_affected" : "=" }, { "version_value" : "11.8.0", "version_affected" : "=" }, { "version_value" : "11.8.1", "version_affected" : "=" }, { "version_value" : "11.9.0", "version_affected" : "=" }, { "version_value" : "11.10.0", "version_affected" : "=" }, { "version_value" : "11.10.1", "version_affected" : "=" }, { "version_value" : "11.10.2", "version_affected" : "=" }, { "version_value" : "11.11.0", "version_affected" : "=" }, { "version_value" : "11.12.0", "version_affected" : "=" }, { "version_value" : "11.12.1", "version_affected" : "=" }, { "version_value" : "11.13.0", "version_affected" : "=" }, { "version_value" : "11.13.1", "version_affected" : "=" }, { "version_value" : "11.14.0", "version_affected" : "=" }, { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.2.0", "version_affected" : "=" }, { "version_value" : "12.3.0", "version_affected" : "=" }, { "version_value" : "12.3.1", "version_affected" : "=" }, { "version_value" : "12.3.2", "version_affected" : "=" }, { "version_value" : "12.4.0", "version_affected" : "=" }, { "version_value" : "12.5.0", "version_affected" : "=" }, { "version_value" : "12.5.1", "version_affected" : "=" }, { "version_value" : "12.6.0", "version_affected" : "=" }, { "version_value" : "12.6.1", "version_affected" : "=" }, { "version_value" : "12.7.0", "version_affected" : "=" } ] } }, { "product_name" : "certified_asterisk", "version" : { "version_data" : [ { "version_value" : "1.8.28", "version_affected" : "=" }, { "version_value" : "11.6", "version_affected" : "=" }, { "version_value" : "11.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2014-018.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2014-018.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before 1.8.28-cert8 and 11.6 before 11.6-cert8 allows remote authenticated users to gain privileges via a call from an external protocol, as demonstrated by the AMI protocol." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert1:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert1-rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert2:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:1.8.28:cert5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:11.6.0:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.8.0", "versionEndIncluding" : "1.8.32.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.14.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.7.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-24T15:59Z", "lastModifiedDate" : "2019-07-16T12:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8735", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bad_behavior_project", "product" : { "product_data" : [ { "product_name" : "bad_behavior", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" }, { "version_value" : "6.x-2.1", "version_affected" : "=" }, { "version_value" : "6.x-2.2", "version_affected" : "=" }, { "version_value" : "6.x-2.13", "version_affected" : "=" }, { "version_value" : "6.x-2.14", "version_affected" : "=" }, { "version_value" : "6.x-2.113", "version_affected" : "=" }, { "version_value" : "6.x-2.114", "version_affected" : "=" }, { "version_value" : "6.x-2.115", "version_affected" : "=" }, { "version_value" : "6.x-2.116", "version_affected" : "=" }, { "version_value" : "6.x-2.200", "version_affected" : "=" }, { "version_value" : "6.x-2.214", "version_affected" : "=" }, { "version_value" : "6.x-2.215", "version_affected" : "=" }, { "version_value" : "6.x-2.216", "version_affected" : "=" }, { "version_value" : "6.x-2.217", "version_affected" : "=" }, { "version_value" : "6.x-2.220", "version_affected" : "=" }, { "version_value" : "6.x-2.221", "version_affected" : "=" }, { "version_value" : "6.x-2.222", "version_affected" : "=" }, { "version_value" : "6.x-2.223", "version_affected" : "=" }, { "version_value" : "6.x-2.225", "version_affected" : "=" }, { "version_value" : "6.x-2.226", "version_affected" : "=" }, { "version_value" : "6.x-2.227", "version_affected" : "=" }, { "version_value" : "6.x-2.228", "version_affected" : "=" }, { "version_value" : "6.x-2.2210", "version_affected" : "=" }, { "version_value" : "6.x-2.2211", "version_affected" : "=" }, { "version_value" : "6.x-2.2212", "version_affected" : "=" }, { "version_value" : "6.x-2.2213", "version_affected" : "=" }, { "version_value" : "6.x-2.2214", "version_affected" : "=" }, { "version_value" : "6.x-2.2215", "version_affected" : "=" }, { "version_value" : "7.x-2.220", "version_affected" : "=" }, { "version_value" : "7.x-2.221", "version_affected" : "=" }, { "version_value" : "7.x-2.222", "version_affected" : "=" }, { "version_value" : "7.x-2.223", "version_affected" : "=" }, { "version_value" : "7.x-2.225", "version_affected" : "=" }, { "version_value" : "7.x-2.226", "version_affected" : "=" }, { "version_value" : "7.x-2.227", "version_affected" : "=" }, { "version_value" : "7.x-2.228", "version_affected" : "=" }, { "version_value" : "7.x-2.2210", "version_affected" : "=" }, { "version_value" : "7.x-2.2211", "version_affected" : "=" }, { "version_value" : "7.x-2.2212", "version_affected" : "=" }, { "version_value" : "7.x-2.2213", "version_affected" : "=" }, { "version_value" : "7.x-2.2214", "version_affected" : "=" }, { "version_value" : "7.x-2.2215", "version_affected" : "=" }, { "version_value" : "7.x-2.2216", "version_affected" : "=" }, { "version_value" : "7.x-2.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.drupal.org/node/2360953", "name" : "https://www.drupal.org/node/2360953", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://www.drupal.org/node/2360955", "name" : "https://www.drupal.org/node/2360955", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://www.drupal.org/node/2361611", "name" : "https://www.drupal.org/node/2361611", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-12T16:55Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2014-8770", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "magmi_project", "product" : { "product_data" : [ { "product_name" : "magmi", "version" : { "version_data" : [ { "version_value" : "0.7.17a", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/show/osvdb/113848", "name" : "113848", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://www.exploit-db.com/exploits/35052", "name" : "35052", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary code by uploading a ZIP file that contains a PHP file, then accessing the PHP file via a direct request to it in magmi/plugins/." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:magmi_project:magmi:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.7.17a" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2014-11-13T21:32Z", "lastModifiedDate" : "2019-07-16T12:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2015-3907", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "codeigniter-restserver_project", "product" : { "product_data" : [ { "product_name" : "codeigniter-restserver", "version" : { "version_data" : [ { "version_value" : "2.7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-611" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.hitcon.org/post/127839729207/codeigniter-rest-server-module-xxe-cve-2015-3907", "name" : "https://kb.hitcon.org/post/127839729207/codeigniter-rest-server-module-xxe-cve-2015-3907", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:codeigniter-restserver_project:codeigniter-restserver:2.7.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T21:15Z", "lastModifiedDate" : "2019-07-11T13:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2015-7882", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jira.mongodb.org/browse/SERVER-20691", "name" : "https://jira.mongodb.org/browse/SERVER-20691", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2016-10762", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "automattic", "product" : { "product_data" : [ { "product_name" : "camptix_event_ticketing", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://hackerone.com/reports/151516", "name" : "https://hackerone.com/reports/151516", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/camptix/#developers", "name" : "https://wordpress.org/plugins/camptix/#developers", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:automattic:camptix_event_ticketing:*:*:*:*:*:wordpress:*:*", "versionEndExcluding" : "1.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T12:15Z", "lastModifiedDate" : "2019-07-18T18:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2016-10763", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "automattic", "product" : { "product_data" : [ { "product_name" : "camptix_event_ticketing", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://hackerone.com/reports/152958", "name" : "https://hackerone.com/reports/152958", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/camptix/#developers", "name" : "https://wordpress.org/plugins/camptix/#developers", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:automattic:camptix_event_ticketing:*:*:*:*:*:wordpress:*:*", "versionEndExcluding" : "1.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.8, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.7, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T12:15Z", "lastModifiedDate" : "2019-07-18T18:38Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-11578", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "blipcare", "product" : { "product_data" : [ { "product_name" : "wi-fi_blood_pressure_monitor_firmware", "version" : { "version_data" : [ { "version_value" : "bp700_10.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "name" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "name" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/8", "name" : "20190609 Newly releases IoT security issues", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using plain text HTTP protocol. The user uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is connected to the Blipcare's device wireless network to easily sniff these values using a MITM attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "bp700_10.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T21:15Z", "lastModifiedDate" : "2019-07-15T13:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-11579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "blipcare", "product" : { "product_data" : [ { "product_name" : "wi-fi_blood_pressure_monitor_firmware", "version" : { "version_data" : [ { "version_value" : "bp700_10.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-254" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "name" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "name" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/8", "name" : "20190609 Newly releases IoT security issues", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the most recent firmware for Blipcare, the device provides an open Wireless network called \"Blip\" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is in vicinity of Wireless signal generated by the Blipcare device to easily sniff the credentials. Also, an attacker can connect to the open wireless network \"Blip\" exposed by the device and modify the HTTP response presented to the user by the device to execute other attacks such as convincing the user to download and execute a malicious binary that would infect a user's computer or mobile device with malware." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "bp700_10.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 7.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 4.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.5, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T21:15Z", "lastModifiedDate" : "2019-07-15T13:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-11580", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "blipcare", "product" : { "product_data" : [ { "product_name" : "wi-fi_blood_pressure_monitor_firmware", "version" : { "version_data" : [ { "version_value" : "bp700_10.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "name" : "http://packetstormsecurity.com/files/153225/Blipcare-Clear-Text-Communication-Memory-Corruption.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "name" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Blipcare_sec_issues.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/8", "name" : "20190609 Newly releases IoT security issues", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the \"Blip\" open wireless connection provided by the device, if a large string is sent as a part of the HTTP request in any part of the HTTP headers, the device could become completely unresponsive. Presumably this happens as the memory footprint provided to this device is very small. According to the specs from Rezolt, the Wi-Fi module only has 256k of memory. As a result, an incorrect string copy operation using either memcpy, strcpy, or any of their other variants could result in filling up the memory space allocated to the function executing and this would result in memory corruption. To test the theory, one can modify the demo application provided by the Cypress WICED SDK and introduce an incorrect \"memcpy\" operation and use the compiled application on the evaluation board provided by Cypress semiconductors with exactly the same Wi-Fi SOC. The results were identical where the device would completely stop responding to any of the ping or web requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:blipcare:wi-fi_blood_pressure_monitor_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "bp700_10.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:blipcare:wi-fi_blood_pressure_monitor:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.5, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T21:15Z", "lastModifiedDate" : "2019-07-15T13:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-12652", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libpng", "product" : { "product_data" : [ { "product_name" : "libpng", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "0.81", "version_affected" : "=" }, { "version_value" : "0.82", "version_affected" : "=" }, { "version_value" : "0.85", "version_affected" : "=" }, { "version_value" : "0.86", "version_affected" : "=" }, { "version_value" : "0.87", "version_affected" : "=" }, { "version_value" : "0.88", "version_affected" : "=" }, { "version_value" : "0.89", "version_affected" : "=" }, { "version_value" : "0.89c", "version_affected" : "=" }, { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.95", "version_affected" : "=" }, { "version_value" : "0.96", "version_affected" : "=" }, { "version_value" : "0.97", "version_affected" : "=" }, { "version_value" : "0.98", "version_affected" : "=" }, { "version_value" : "0.99", "version_affected" : "=" }, { "version_value" : "0.99a", "version_affected" : "=" }, { "version_value" : "0.99b", "version_affected" : "=" }, { "version_value" : "0.99c", "version_affected" : "=" }, { "version_value" : "0.99d", "version_affected" : "=" }, { "version_value" : "0.99e", "version_affected" : "=" }, { "version_value" : "0.99f", "version_affected" : "=" }, { "version_value" : "0.99g", "version_affected" : "=" }, { "version_value" : "0.99h", "version_affected" : "=" }, { "version_value" : "1.00", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.0a", "version_affected" : "=" }, { "version_value" : "1.0.0b", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.1a", "version_affected" : "=" }, { "version_value" : "1.0.1b", "version_affected" : "=" }, { "version_value" : "1.0.1c", "version_affected" : "=" }, { "version_value" : "1.0.1d", "version_affected" : "=" }, { "version_value" : "1.0.1e", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.2a", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.3a", "version_affected" : "=" }, { "version_value" : "1.0.3b", "version_affected" : "=" }, { "version_value" : "1.0.3d", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.4a", "version_affected" : "=" }, { "version_value" : "1.0.4b", "version_affected" : "=" }, { "version_value" : "1.0.4c", "version_affected" : "=" }, { "version_value" : "1.0.4d", "version_affected" : "=" }, { "version_value" : "1.0.4e", "version_affected" : "=" }, { "version_value" : "1.0.4f", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.5a", "version_affected" : "=" }, { "version_value" : "1.0.5b", "version_affected" : "=" }, { "version_value" : "1.0.5c", "version_affected" : "=" }, { "version_value" : "1.0.5d", "version_affected" : "=" }, { "version_value" : "1.0.5e", "version_affected" : "=" }, { "version_value" : "1.0.5f", "version_affected" : "=" }, { "version_value" : "1.0.5g", "version_affected" : "=" }, { "version_value" : "1.0.5h", "version_affected" : "=" }, { "version_value" : "1.0.5i", "version_affected" : "=" }, { "version_value" : "1.0.5j", "version_affected" : "=" }, { "version_value" : "1.0.5k", "version_affected" : "=" }, { "version_value" : "1.0.5l", "version_affected" : "=" }, { "version_value" : "1.0.5m", "version_affected" : "=" }, { "version_value" : "1.0.5n", "version_affected" : "=" }, { "version_value" : "1.0.5o", "version_affected" : "=" }, { "version_value" : "1.0.5p", "version_affected" : "=" }, { "version_value" : "1.0.5q", "version_affected" : "=" }, { "version_value" : "1.0.5r", "version_affected" : "=" }, { "version_value" : "1.0.5s", "version_affected" : "=" }, { "version_value" : "1.0.5t", "version_affected" : "=" }, { "version_value" : "1.0.5u", "version_affected" : "=" }, { "version_value" : "1.0.5v", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.6d", "version_affected" : "=" }, { "version_value" : "1.0.6e", "version_affected" : "=" }, { "version_value" : "1.0.6f", "version_affected" : "=" }, { "version_value" : "1.0.6g", "version_affected" : "=" }, { "version_value" : "1.0.6h", "version_affected" : "=" }, { "version_value" : "1.0.6i", "version_affected" : "=" }, { "version_value" : "1.0.6j", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0.12", "version_affected" : "=" }, { "version_value" : "1.0.13", "version_affected" : "=" }, { "version_value" : "1.0.14", "version_affected" : "=" }, { "version_value" : "1.0.15", "version_affected" : "=" }, { "version_value" : "1.0.16", "version_affected" : "=" }, { "version_value" : "1.0.17", "version_affected" : "=" }, { "version_value" : "1.0.18", "version_affected" : "=" }, { "version_value" : "1.0.19", "version_affected" : "=" }, { "version_value" : "1.0.20", "version_affected" : "=" }, { "version_value" : "1.0.21", "version_affected" : "=" }, { "version_value" : "1.0.22", "version_affected" : "=" }, { "version_value" : "1.0.23", "version_affected" : "=" }, { "version_value" : "1.0.24", "version_affected" : "=" }, { "version_value" : "1.0.25", "version_affected" : "=" }, { "version_value" : "1.0.26", "version_affected" : "=" }, { "version_value" : "1.0.27", "version_affected" : "=" }, { "version_value" : "1.0.28", "version_affected" : "=" }, { "version_value" : "1.0.29", "version_affected" : "=" }, { "version_value" : "1.0.30", "version_affected" : "=" }, { "version_value" : "1.0.31", "version_affected" : "=" }, { "version_value" : "1.0.32", "version_affected" : "=" }, { "version_value" : "1.0.33", "version_affected" : "=" }, { "version_value" : "1.0.34", "version_affected" : "=" }, { "version_value" : "1.0.35", "version_affected" : "=" }, { "version_value" : "1.0.37", "version_affected" : "=" }, { "version_value" : "1.0.38", "version_affected" : "=" }, { "version_value" : "1.0.39", "version_affected" : "=" }, { "version_value" : "1.0.40", "version_affected" : "=" }, { "version_value" : "1.0.41", "version_affected" : "=" }, { "version_value" : "1.0.42", "version_affected" : "=" }, { "version_value" : "1.0.43", "version_affected" : "=" }, { "version_value" : "1.0.44", "version_affected" : "=" }, { "version_value" : "1.0.45", "version_affected" : "=" }, { "version_value" : "1.0.46", "version_affected" : "=" }, { "version_value" : "1.0.47", "version_affected" : "=" }, { "version_value" : "1.0.48", "version_affected" : "=" }, { "version_value" : "1.0.50", "version_affected" : "=" }, { "version_value" : "1.0.51", "version_affected" : "=" }, { "version_value" : "1.0.52", "version_affected" : "=" }, { "version_value" : "1.0.53", "version_affected" : "=" }, { "version_value" : "1.0.54", "version_affected" : "=" }, { "version_value" : "1.0.55", "version_affected" : "=" }, { "version_value" : "1.0.56", "version_affected" : "=" }, { "version_value" : "1.0.57", "version_affected" : "=" }, { "version_value" : "1.0.58", "version_affected" : "=" }, { "version_value" : "1.0.59", "version_affected" : "=" }, { "version_value" : "1.0.60", "version_affected" : "=" }, { "version_value" : "1.0.61", "version_affected" : "=" }, { "version_value" : "1.0.62", "version_affected" : "=" }, { "version_value" : "1.0.63", "version_affected" : "=" }, { "version_value" : "1.0.64", "version_affected" : "=" }, { "version_value" : "1.0.65", "version_affected" : "=" }, { "version_value" : "1.0.66", "version_affected" : "=" }, { "version_value" : "1.0.67", "version_affected" : "=" }, { "version_value" : "1.0.68", "version_affected" : "=" }, { "version_value" : "1.0.69", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.12", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" }, { "version_value" : "1.2.14", "version_affected" : "=" }, { "version_value" : "1.2.15", "version_affected" : "=" }, { "version_value" : "1.2.16", "version_affected" : "=" }, { "version_value" : "1.2.17", "version_affected" : "=" }, { "version_value" : "1.2.18", "version_affected" : "=" }, { "version_value" : "1.2.19", "version_affected" : "=" }, { "version_value" : "1.2.20", "version_affected" : "=" }, { "version_value" : "1.2.21", "version_affected" : "=" }, { "version_value" : "1.2.22", "version_affected" : "=" }, { "version_value" : "1.2.23", "version_affected" : "=" }, { "version_value" : "1.2.24", "version_affected" : "=" }, { "version_value" : "1.2.25", "version_affected" : "=" }, { "version_value" : "1.2.26", "version_affected" : "=" }, { "version_value" : "1.2.27", "version_affected" : "=" }, { "version_value" : "1.2.28", "version_affected" : "=" }, { "version_value" : "1.2.29", "version_affected" : "=" }, { "version_value" : "1.2.30", "version_affected" : "=" }, { "version_value" : "1.2.31", "version_affected" : "=" }, { "version_value" : "1.2.32", "version_affected" : "=" }, { "version_value" : "1.2.33", "version_affected" : "=" }, { "version_value" : "1.2.34", "version_affected" : "=" }, { "version_value" : "1.2.35", "version_affected" : "=" }, { "version_value" : "1.2.36", "version_affected" : "=" }, { "version_value" : "1.2.37", "version_affected" : "=" }, { "version_value" : "1.2.38", "version_affected" : "=" }, { "version_value" : "1.2.39", "version_affected" : "=" }, { "version_value" : "1.2.40", "version_affected" : "=" }, { "version_value" : "1.2.41", "version_affected" : "=" }, { "version_value" : "1.2.42", "version_affected" : "=" }, { "version_value" : "1.2.43", "version_affected" : "=" }, { "version_value" : "1.2.44", "version_affected" : "=" }, { "version_value" : "1.2.45", "version_affected" : "=" }, { "version_value" : "1.2.46", "version_affected" : "=" }, { "version_value" : "1.2.47", "version_affected" : "=" }, { "version_value" : "1.2.48", "version_affected" : "=" }, { "version_value" : "1.2.49", "version_affected" : "=" }, { "version_value" : "1.2.50", "version_affected" : "=" }, { "version_value" : "1.2.51", "version_affected" : "=" }, { "version_value" : "1.2.52", "version_affected" : "=" }, { "version_value" : "1.2.53", "version_affected" : "=" }, { "version_value" : "1.2.54", "version_affected" : "=" }, { "version_value" : "1.2.55", "version_affected" : "=" }, { "version_value" : "1.2.56", "version_affected" : "=" }, { "version_value" : "1.2.57", "version_affected" : "=" }, { "version_value" : "1.2.58", "version_affected" : "=" }, { "version_value" : "1.2.59", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.4.16", "version_affected" : "=" }, { "version_value" : "1.4.17", "version_affected" : "=" }, { "version_value" : "1.4.18", "version_affected" : "=" }, { "version_value" : "1.4.19", "version_affected" : "=" }, { "version_value" : "1.4.20", "version_affected" : "=" }, { "version_value" : "1.4.21", "version_affected" : "=" }, { "version_value" : "1.4.22", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.5.9", "version_affected" : "=" }, { "version_value" : "1.5.10", "version_affected" : "=" }, { "version_value" : "1.5.11", "version_affected" : "=" }, { "version_value" : "1.5.12", "version_affected" : "=" }, { "version_value" : "1.5.13", "version_affected" : "=" }, { "version_value" : "1.5.14", "version_affected" : "=" }, { "version_value" : "1.5.15", "version_affected" : "=" }, { "version_value" : "1.5.16", "version_affected" : "=" }, { "version_value" : "1.5.17", "version_affected" : "=" }, { "version_value" : "1.5.18", "version_affected" : "=" }, { "version_value" : "1.5.19", "version_affected" : "=" }, { "version_value" : "1.5.20", "version_affected" : "=" }, { "version_value" : "1.5.21", "version_affected" : "=" }, { "version_value" : "1.5.22", "version_affected" : "=" }, { "version_value" : "1.5.23", "version_affected" : "=" }, { "version_value" : "1.5.24", "version_affected" : "=" }, { "version_value" : "1.5.25", "version_affected" : "=" }, { "version_value" : "1.5.26", "version_affected" : "=" }, { "version_value" : "1.5.27", "version_affected" : "=" }, { "version_value" : "1.5.28", "version_affected" : "=" }, { "version_value" : "1.5.29", "version_affected" : "=" }, { "version_value" : "1.5.30", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" }, { "version_value" : "1.6.10", "version_affected" : "=" }, { "version_value" : "1.6.11", "version_affected" : "=" }, { "version_value" : "1.6.12", "version_affected" : "=" }, { "version_value" : "1.6.13", "version_affected" : "=" }, { "version_value" : "1.6.14", "version_affected" : "=" }, { "version_value" : "1.6.15", "version_affected" : "=" }, { "version_value" : "1.6.16", "version_affected" : "=" }, { "version_value" : "1.6.17", "version_affected" : "=" }, { "version_value" : "1.6.18", "version_affected" : "=" }, { "version_value" : "1.6.18-12", "version_affected" : "=" }, { "version_value" : "1.6.19", "version_affected" : "=" }, { "version_value" : "1.6.19-13", "version_affected" : "=" }, { "version_value" : "1.6.19-14", "version_affected" : "=" }, { "version_value" : "1.6.20", "version_affected" : "=" }, { "version_value" : "1.6.20-15", "version_affected" : "=" }, { "version_value" : "1.6.20-16", "version_affected" : "=" }, { "version_value" : "1.6.21", "version_affected" : "=" }, { "version_value" : "1.6.21-17", "version_affected" : "=" }, { "version_value" : "1.6.21-18", "version_affected" : "=" }, { "version_value" : "1.6.21-19", "version_affected" : "=" }, { "version_value" : "1.6.22", "version_affected" : "=" }, { "version_value" : "1.6.22-20", "version_affected" : "=" }, { "version_value" : "1.6.23", "version_affected" : "=" }, { "version_value" : "1.6.23-21", "version_affected" : "=" }, { "version_value" : "1.6.24", "version_affected" : "=" }, { "version_value" : "1.6.24-22", "version_affected" : "=" }, { "version_value" : "1.6.25", "version_affected" : "=" }, { "version_value" : "1.6.25-23", "version_affected" : "=" }, { "version_value" : "1.6.25-27", "version_affected" : "=" }, { "version_value" : "1.6.25-28", "version_affected" : "=" }, { "version_value" : "1.6.26", "version_affected" : "=" }, { "version_value" : "1.6.26-29", "version_affected" : "=" }, { "version_value" : "1.6.26-30", "version_affected" : "=" }, { "version_value" : "1.6.26-32", "version_affected" : "=" }, { "version_value" : "1.6.26-34", "version_affected" : "=" }, { "version_value" : "1.6.26-35", "version_affected" : "=" }, { "version_value" : "1.6.27", "version_affected" : "=" }, { "version_value" : "1.6.27-37", "version_affected" : "=" }, { "version_value" : "1.6.28", "version_affected" : "=" }, { "version_value" : "1.6.28-38", "version_affected" : "=" }, { "version_value" : "1.6.28-39", "version_affected" : "=" }, { "version_value" : "1.6.29", "version_affected" : "=" }, { "version_value" : "1.6.29-40", "version_affected" : "=" }, { "version_value" : "1.6.29-42", "version_affected" : "=" }, { "version_value" : "1.6.29-43", "version_affected" : "=" }, { "version_value" : "1.6.30", "version_affected" : "=" }, { "version_value" : "1.6.30-45", "version_affected" : "=" }, { "version_value" : "1.6.31", "version_affected" : "=" }, { "version_value" : "1.6.31-46", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109269", "name" : "109269", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE", "name" : "https://github.com/glennrp/libpng/blob/df7e9dae0c4aac63d55361e35709c864fa1b8363/ANNOUNCE", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libpng before 1.6.32 does not properly check the length of chunks against the user limit." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.6.32" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-18T07:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-13719", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "amcrest", "product" : { "product_data" : [ { "product_name" : "ipm-721s_firmware", "version" : { "version_data" : [ { "version_value" : "amcrest_ipc-awxx_eng_n_v2.420.ac00.17.r.20170322", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html", "name" : "http://packetstormsecurity.com/files/153224/Amcrest-IPM-721S-Credential-Disclosure-Privilege-Escalation.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf", "name" : "https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Amcrest_sec_issues.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/8", "name" : "20190609 Newly releases IoT security issues", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Amcrest IPM-721S Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 allows HTTP requests that permit enabling various functionalities of the camera by using HTTP APIs, instead of the web management interface that is provided by the application. This HTTP API receives the credentials as base64 encoded in the Authorization HTTP header. However, a missing length check in the code allows an attacker to send a string of 1024 characters in the password field, and allows an attacker to exploit a memory corruption issue. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the firmware version Amcrest_IPC-AWXX_Eng_N_V2.420.AC00.17.R.20170322 is dissected using the binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that has many of the binaries in the /usr folder. The binary \"sonia\" is the one that has the vulnerable function that performs the credential check in the binary for the HTTP API specification. If we open this binary in IDA Pro we will notice that this follows an ARM little-endian format. The function at address 00415364 in IDA Pro starts the HTTP authentication process. This function calls another function at sub_ 0042CCA0 at address 0041549C. This function performs a strchr operation after base64 decoding the credentials, and stores the result on the stack, which results in a stack-based buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:amcrest:ipm-721s_firmware:amcrest_ipc-awxx_eng_n_v2.420.ac00.17.r.20170322:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:amcrest:ipm-721s:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T20:15Z", "lastModifiedDate" : "2019-07-17T15:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-6217", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "paypal", "product" : { "product_data" : [ { "product_name" : "adaptive_payments_sdk", "version" : { "version_data" : [ { "version_value" : "3.9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/paypal/adaptivepayments-sdk-php/issues/87", "name" : "https://github.com/paypal/adaptivepayments-sdk-php/issues/87", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "paypal/adaptivepayments-sdk-php v3.9.2 is vulnerable to a reflected XSS in the SetPaymentOptions.php resulting code execution" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:paypal:adaptive_payments_sdk:3.9.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-11T11:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-6900", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "riello-ups", "product" : { "product_data" : [ { "product_name" : "netman_204_firmware", "version" : { "version_data" : [ { "version_value" : "14-2", "version_affected" : "=" }, { "version_value" : "15-2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/", "name" : "https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://web.archive.org/web/20170205100702/https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/", "name" : "https://web.archive.org/web/20170205100702/https://blog.synack.co.uk/2017/01/31/my-first-exploit-db-post/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VAL1 should be enclosed in quotes to prevent the potential for Bash command injection. Further to this, VAL0 and VAL1 should be sanitised to ensure they do not contain malicious characters. Passing it the username of '-' will cause it to time out and log the user in because of poor error handling. This will log the attacker in as an administrator where the telnet / ssh services can be enabled, and the credentials for local users can be reset. Also, login.cgi accepts the username as a GET parameter, so login can be achieved by browsing to the /cgi-bin/login.cgi?username=-%20a URI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:riello-ups:netman_204_firmware:14-2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:riello-ups:netman_204_firmware:15-2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:riello-ups:netman_204:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T17:15Z", "lastModifiedDate" : "2019-07-15T18:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-7189", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php", "product" : { "product_data" : [ { "product_name" : "php", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.0.5", "version_affected" : "=" }, { "version_value" : "7.0.6", "version_affected" : "=" }, { "version_value" : "7.0.7", "version_affected" : "=" }, { "version_value" : "7.0.8", "version_affected" : "=" }, { "version_value" : "7.0.9", "version_affected" : "=" }, { "version_value" : "7.0.10", "version_affected" : "=" }, { "version_value" : "7.0.11", "version_affected" : "=" }, { "version_value" : "7.0.12", "version_affected" : "=" }, { "version_value" : "7.0.13", "version_affected" : "=" }, { "version_value" : "7.0.14", "version_affected" : "=" }, { "version_value" : "7.0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.php.net/bug.php?id=74192", "name" : "https://bugs.php.net/bug.php?id=74192", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a", "name" : "https://github.com/php/php-src/commit/bab0b99f376dac9170ac81382a5ed526938d595a", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "main/streams/xp_socket.c in PHP 7.x before 2017-03-07 misparses fsockopen calls, such as by interpreting fsockopen('127.0.0.1:80', 443) as if the address/port were 127.0.0.1:80:443, which is later truncated to 127.0.0.1:80. This behavior has a security risk if the explicitly provided port number (i.e., 443 in this example) is hardcoded into an application as a security policy, but the hostname argument (i.e., 127.0.0.1:80 in this example) is obtained from untrusted input." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.0.0", "versionEndExcluding" : "7.0.16" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-17T16:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-9325", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cloudera", "product" : { "product_data" : [ { "product_name" : "cdh", "version" : { "version_data" : [ { "version_value" : "5.8.0", "version_affected" : "<=" }, { "version_value" : "5.8.2", "version_affected" : "=" }, { "version_value" : "5.8.3", "version_affected" : "=" }, { "version_value" : "5.8.4", "version_affected" : "=" }, { "version_value" : "5.8.5", "version_affected" : "=" }, { "version_value" : "5.9.0", "version_affected" : "=" }, { "version_value" : "5.9.1", "version_affected" : "=" }, { "version_value" : "5.9.2", "version_affected" : "=" }, { "version_value" : "5.10.0", "version_affected" : "=" }, { "version_value" : "5.10.1", "version_affected" : "=" }, { "version_value" : "5.11.0", "version_affected" : "=" }, { "version_value" : "5.11.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "name" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.8.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.8.2", "versionEndIncluding" : "5.9.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.10.0", "versionEndIncluding" : "5.10.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cdh:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.11.0", "versionEndIncluding" : "5.11.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T17:15Z", "lastModifiedDate" : "2019-07-11T16:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-9326", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cloudera", "product" : { "product_data" : [ { "product_name" : "cloudera_manager", "version" : { "version_data" : [ { "version_value" : "5.11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "name" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-agent directory managed by Cloudera Manager. The keystore file itself is not exposed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:5.11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T17:15Z", "lastModifiedDate" : "2019-07-11T17:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2017-9327", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cloudera", "product" : { "product_data" : [ { "product_name" : "cloudera_manager", "version" : { "version_data" : [ { "version_value" : "5.9.2", "version_affected" : "=" }, { "version_value" : "5.10.1", "version_affected" : "=" }, { "version_value" : "5.11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-275" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "name" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Secret data of processes managed by CM is not secured by file permissions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:5.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:5.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:5.11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T17:15Z", "lastModifiedDate" : "2019-07-11T18:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-10531", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "americaarmy", "product" : { "product_data" : [ { "product_name" : "proving_grounds", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.xlabs.com.br/blog/author/mauricio-correa/", "name" : "https://www.xlabs.com.br/blog/author/mauricio-correa/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.xlabs.com.br/blog/cve-2018-10531-americas-army-proving-grounds-ddos-amplification/", "name" : "https://www.xlabs.com.br/blog/cve-2018-10531-americas-army-proving-grounds-ddos-amplification/", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:americaarmy:proving_grounds:-:*:*:*:*:unreal_engine:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-17T17:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-11307", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fasterxml", "product" : { "product_data" : [ { "product_name" : "jackson-databind", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.1.1", "version_affected" : "=" }, { "version_value" : "2.4.1.2", "version_affected" : "=" }, { "version_value" : "2.4.1.3", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.5.1", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.6.1", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.7.1", "version_affected" : "=" }, { "version_value" : "2.6.7.2", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.1-1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.9.1", "version_affected" : "=" }, { "version_value" : "2.7.9.2", "version_affected" : "=" }, { "version_value" : "2.7.9.3", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.8.3", "version_affected" : "=" }, { "version_value" : "2.8.4", "version_affected" : "=" }, { "version_value" : "2.8.5", "version_affected" : "=" }, { "version_value" : "2.8.6", "version_affected" : "=" }, { "version_value" : "2.8.7", "version_affected" : "=" }, { "version_value" : "2.8.8", "version_affected" : "=" }, { "version_value" : "2.8.8.1", "version_affected" : "=" }, { "version_value" : "2.8.9", "version_affected" : "=" }, { "version_value" : "2.8.10", "version_affected" : "=" }, { "version_value" : "2.8.11", "version_affected" : "=" }, { "version_value" : "2.8.11.1", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "2.9.3", "version_affected" : "=" }, { "version_value" : "2.9.4", "version_affected" : "=" }, { "version_value" : "2.9.5", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-502" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://access.redhat.com/errata/RHSA-2019:0782", "name" : "https://access.redhat.com/errata/RHSA-2019:0782", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/FasterXML/jackson-databind/issues/2032", "name" : "https://github.com/FasterXML/jackson-databind/issues/2032", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "name" : "https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://nvd.nist.gov/vuln/detail/CVE-2017-7525", "name" : "https://nvd.nist.gov/vuln/detail/CVE-2017-7525", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0.0", "versionEndExcluding" : "2.7.9.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.8.0", "versionEndExcluding" : "2.8.11.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.9.0", "versionEndExcluding" : "2.9.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T16:15Z", "lastModifiedDate" : "2019-07-16T18:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-11563", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "otrs", "product" : { "product_data" : [ { "product_name" : "otrs", "version" : { "version_data" : [ { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-74" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://community.otrs.com/security-advisory-2018-02-security-update-for-otrs-framework/", "name" : "https://community.otrs.com/security-advisory-2018-02-security-update-for-otrs-framework/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://lists.otrs.org/pipermail/announce/2018/000720.html", "name" : "https://lists.otrs.org/pipermail/announce/2018/000720.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.otrs.com/category/release-and-security-notes-en/", "name" : "https://www.otrs.com/category/release-and-security-notes-en/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.0.0", "versionEndIncluding" : "6.0.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.6, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.1, "impactScore" : 2.5 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-08T13:15Z", "lastModifiedDate" : "2019-07-11T18:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-11734", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "e107", "product" : { "product_data" : [ { "product_name" : "e107", "version" : { "version_data" : [ { "version_value" : "2.1.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/e107inc/e107/issues/3170", "name" : "https://github.com/e107inc/e107/issues/3170", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In e107 v2.1.7, output without filtering results in XSS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:e107:e107:2.1.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T18:15Z", "lastModifiedDate" : "2019-07-17T15:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-11744", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cloudera", "product" : { "product_data" : [ { "product_name" : "cloudera_manager", "version" : { "version_data" : [ { "version_value" : "5.16", "version_affected" : "<=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "name" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager", "name" : "https://www.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cloudera Manager through 5.15 has Incorrect Access Control." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.16" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cloudera:cloudera_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.0.0", "versionEndIncluding" : "6.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-18T14:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-12628", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "eventum_project", "product" : { "product_data" : [ { "product_name" : "eventum", "version" : { "version_data" : [ { "version_value" : "3.5.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/eventum/eventum/blob/master/CHANGELOG.md", "name" : "https://github.com/eventum/eventum/blob/master/CHANGELOG.md", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://github.com/eventum/eventum/releases/tag/v3.5.2", "name" : "https://github.com/eventum/eventum/releases/tag/v3.5.2", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Eventum 3.5.0. CSRF in htdocs/manage/users.php allows creating another user with admin privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:eventum_project:eventum:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-11T16:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-13442", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "solarwinds", "product" : { "product_data" : [ { "product_name" : "network_performance_monitor", "version" : { "version_data" : [ { "version_value" : "12.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/", "name" : "https://labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:solarwinds:network_performance_monitor:*:*:*:*:*:*:*:*", "versionEndIncluding" : "12.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-18T18:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vivotek", "product" : { "product_data" : [ { "product_name" : "fd8136_firmware", "version" : { "version_data" : [ { "version_value" : "0301a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "name" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/", "name" : "https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:vivotek:fd8136_firmware:0301a:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:vivotek:fd8136:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T13:15Z", "lastModifiedDate" : "2019-07-18T13:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14495", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vivotek", "product" : { "product_data" : [ { "product_name" : "fd8136_firmware", "version" : { "version_data" : [ { "version_value" : "0301a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "name" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/", "name" : "https://www.vdalabs.com/2018/08/06/professional-iot-hacking-series-hunting-remote-command-injection/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Vivotek FD8136 devices allow Remote Command Injection, aka \"another command injection vulnerability in our target device,\" a different issue than CVE-2018-14494." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:vivotek:fd8136_firmware:0301a:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:vivotek:fd8136:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T21:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14496", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vivotek", "product" : { "product_data" : [ { "product_name" : "fd8136_firmware", "version" : { "version_data" : [ { "version_value" : "0301a", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "name" : "https://www.vdalabs.com/2018/07/23/professional-iot-hacking-series-target-selection-firmware-analysis/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.vdalabs.com/2018/11/29/professional-iot-hacking-series-hunting-remote-memory-corruption/", "name" : "https://www.vdalabs.com/2018/11/29/professional-iot-hacking-series-hunting-remote-memory-corruption/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:vivotek:fd8136_firmware:0301a:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:vivotek:fd8136:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T20:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14528", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "invoxia", "product" : { "product_data" : [ { "product_name" : "nvx220_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-798" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gitlab.com/r3dlight/CVE-2018-14528", "name" : "https://gitlab.com/r3dlight/CVE-2018-14528", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Invoxia NVX220 devices allow TELNET access as admin with a default password." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:invoxia:nvx220_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:invoxia:nvx220:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-15T13:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14529", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "invoxia", "product" : { "product_data" : [ { "product_name" : "nvx220_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gitlab.com/r3dlight/CVE-2018-14529", "name" : "https://gitlab.com/r3dlight/CVE-2018-14529", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Invoxia NVX220 devices allow access to /bin/sh via escape from a restricted CLI, leading to disclosure of password hashes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:invoxia:nvx220_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:invoxia:nvx220:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-11T18:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14550", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libpng", "product" : { "product_data" : [ { "product_name" : "libpng", "version" : { "version_data" : [ { "version_value" : "1.6.35", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token", "name" : "https://github.com/fouzhe/security/tree/master/libpng#stack-buffer-overflow-in-png2pnm-in-function-get_token", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/glennrp/libpng/issues/246", "name" : "https://github.com/glennrp/libpng/issues/246", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libpng:libpng:1.6.35:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-11T15:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14831", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "damicms", "product" : { "product_data" : [ { "product_name" : "damicms", "version" : { "version_data" : [ { "version_value" : "6.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f", "name" : "https://gist.github.com/feric/98180bad0a73716e143ff8dc03fda12f", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a crafted /admin.php?s=Tpl/Add/id/ URI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:damicms:damicms:6.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-17T16:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-14833", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "intuit", "product" : { "product_data" : [ { "product_name" : "lacerte", "version" : { "version_data" : [ { "version_value" : "2017", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://themikewylie.com/2019/05/21/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/", "name" : "https://themikewylie.com/2019/05/21/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://www.themikewylie.com/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/", "name" : "https://www.themikewylie.com/intuit-lacerte-vulnerability-and-data-exposure-cve-2018-11338-cve-2018-14833/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Intuit Lacerte 2017 has Incorrect Access Control." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intuit:lacerte:*:*:*:*:*:windows:*:*", "versionEndIncluding" : "2017" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T13:15Z", "lastModifiedDate" : "2019-07-16T13:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-15738", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stopzilla", "product" : { "product_data" : [ { "product_name" : "antimalware", "version" : { "version_data" : [ { "version_value" : "6.5.2.59", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.greyhathacker.net", "name" : "https://www.greyhathacker.net", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.greyhathacker.net/?p=1025", "name" : "https://www.greyhathacker.net/?p=1025", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stopzilla:antimalware:6.5.2.59:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T13:15Z", "lastModifiedDate" : "2019-07-15T18:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-16386", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "swift", "product" : { "product_data" : [ { "product_name" : "alliance_web_platform", "version" : { "version_data" : [ { "version_value" : "7.1.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-74" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/shiham101/8763642e768582e0182f92cd41c482ec", "name" : "https://gist.github.com/shiham101/8763642e768582e0182f92cd41c482ec", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in SWIFT Alliance Web Platform 7.1.23. A log injection (and an arbitrary log filename) can be achieved via the PATH_INFO to swp/login/EJBRemoteService/, related to com.swift.ejbgwt.j2ee.client.EjBlnvocationException error log information containing null@java:comp/env/ error messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:swift:alliance_web_platform:7.1.23:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-15T15:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17147", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nagios", "product" : { "product_data" : [ { "product_name" : "nagios_xi", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.2.2", "version_affected" : "=" }, { "version_value" : "5.2.3", "version_affected" : "=" }, { "version_value" : "5.2.4", "version_affected" : "=" }, { "version_value" : "5.2.5", "version_affected" : "=" }, { "version_value" : "5.2.6", "version_affected" : "=" }, { "version_value" : "5.2.7", "version_affected" : "=" }, { "version_value" : "5.2.8", "version_affected" : "=" }, { "version_value" : "5.2.9", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.1", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" }, { "version_value" : "5.3.3", "version_affected" : "=" }, { "version_value" : "5.3.4", "version_affected" : "=" }, { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.4.1", "version_affected" : "=" }, { "version_value" : "5.4.2", "version_affected" : "=" }, { "version_value" : "5.4.3", "version_affected" : "=" }, { "version_value" : "5.4.4", "version_affected" : "=" }, { "version_value" : "5.4.5", "version_affected" : "=" }, { "version_value" : "5.4.6", "version_affected" : "=" }, { "version_value" : "5.4.7", "version_affected" : "=" }, { "version_value" : "5.4.8", "version_affected" : "=" }, { "version_value" : "5.4.9", "version_affected" : "=" }, { "version_value" : "5.4.10", "version_affected" : "=" }, { "version_value" : "5.4.11", "version_affected" : "=" }, { "version_value" : "5.4.12", "version_affected" : "=" }, { "version_value" : "5.4.13", "version_affected" : "=" }, { "version_value" : "5.5.0", "version_affected" : "=" }, { "version_value" : "5.5.1", "version_affected" : "=" }, { "version_value" : "5.5.2", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109116", "name" : "109116", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT", "name" : "https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Nagios XI before 5.5.4 has XSS in the auto login admin management page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*", "versionEndExcluding" : "5.5.4" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.8, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.7, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17150", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "intersystems", "product" : { "product_data" : [ { "product_name" : "cache", "version" : { "version_data" : [ { "version_value" : "2017.2.2.865.0", "version_affected" : "=" }, { "version_value" : "2018.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "name" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Intersystems Cache 2017.2.2.865.0 allows XSS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2017.2.2.865.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2018.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-12T19:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17151", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "intersystems", "product" : { "product_data" : [ { "product_name" : "cache", "version" : { "version_data" : [ { "version_value" : "2017.2.2.865.0", "version_affected" : "=" }, { "version_value" : "2018.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "name" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2017.2.2.865.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2018.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.5 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-12T19:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17152", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "intersystems", "product" : { "product_data" : [ { "product_name" : "cache", "version" : { "version_data" : [ { "version_value" : "2017.2.2.865.0", "version_affected" : "=" }, { "version_value" : "2018.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-611" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "name" : "https://know.bishopfox.com/advisories/intersystems-cache-2017-2-2-865-0-vulnerabilities", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Intersystems Cache 2017.2.2.865.0 allows XXE." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2017.2.2.865.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intersystems:cache:2018.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.1, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-12T19:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17196", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "kafka", "version" : { "version_data" : [ { "version_value" : "0.11.0.0", "version_affected" : "=" }, { "version_value" : "0.11.0.1", "version_affected" : "=" }, { "version_value" : "0.11.0.2", "version_affected" : "=" }, { "version_value" : "0.11.0.3", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109139", "name" : "109139", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.mail-archive.com/dev@kafka.apache.org/msg99277.html", "name" : "https://www.mail-archive.com/dev@kafka.apache.org/msg99277.html", "refsource" : "MISC", "tags" : [ "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to 2.1.1 or later where this vulnerability has been fixed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*", "versionStartIncluding" : "0.11.0.0", "versionEndIncluding" : "2.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-18T14:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-17792", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153686/WorldClient-14-Cross-Site-Request-Forgery.html", "name" : "http://packetstormsecurity.com/files/153686/WorldClient-14-Cross-Site-Request-Forgery.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.altn.com/Software/MDaemon-Webmail-WorldClient/", "name" : "https://www.altn.com/Software/MDaemon-Webmail-WorldClient/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MDaemon Webmail (formerly WorldClient) has CSRF." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-18095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109103", "name" : "109103", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.lenovo.com/us/en/product_security/LEN-28116", "name" : "https://support.lenovo.com/us/en/product_security/LEN-28116", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00267.html", "name" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00267.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:intel:ssd_dc_s4500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "scv10150" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:intel:ssd_dc_s4500:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:intel:ssd_dc_s4600_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "scv10150" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:intel:ssd_dc_s4600:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "PHYSICAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 6.8, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 0.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-18T16:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-1921", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "campaign", "version" : { "version_data" : [ { "version_value" : "9.1.0.0", "version_affected" : "=" }, { "version_value" : "9.1.2.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/152857", "name" : "ibm-campaign-cve20181921-xss (152857)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10887995", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10887995", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152857." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:campaign:9.1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:campaign:9.1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:campaign:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:campaign:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-18T12:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19493", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109122", "name" : "109122", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53037", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53037", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a persistent XSS vulnerability in the environment pages due to a lack of input validation and output encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-11T16:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51262", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51262", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access vulnerability that allows an unauthorized user to view private group names." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-11T16:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19495", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.4.1", "version_affected" : "=" }, { "version_value" : "5.4.2", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.4.2", "version_affected" : "=" }, { "version_value" : "6.4.3", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.6.0", "version_affected" : "=" }, { "version_value" : "6.6.1", "version_affected" : "=" }, { "version_value" : "6.6.2", "version_affected" : "=" }, { "version_value" : "6.6.3", "version_affected" : "=" }, { "version_value" : "6.6.4", "version_affected" : "=" }, { "version_value" : "6.6.5", "version_affected" : "=" }, { "version_value" : "6.7.0", "version_affected" : "=" }, { "version_value" : "6.7.1", "version_affected" : "=" }, { "version_value" : "6.7.2", "version_affected" : "=" }, { "version_value" : "6.7.3", "version_affected" : "=" }, { "version_value" : "6.7.4", "version_affected" : "=" }, { "version_value" : "6.7.5", "version_affected" : "=" }, { "version_value" : "6.8.0", "version_affected" : "=" }, { "version_value" : "6.8.1", "version_affected" : "=" }, { "version_value" : "6.8.2", "version_affected" : "=" }, { "version_value" : "6.9.0", "version_affected" : "=" }, { "version_value" : "6.9.1", "version_affected" : "=" }, { "version_value" : "6.9.2", "version_affected" : "=" }, { "version_value" : "6.9.3", "version_affected" : "=" }, { "version_value" : "6.9.4", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.1", "version_affected" : "=" }, { "version_value" : "7.5.2", "version_affected" : "=" }, { "version_value" : "7.5.3", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "=" }, { "version_value" : "7.6.1", "version_affected" : "=" }, { "version_value" : "7.6.2", "version_affected" : "=" }, { "version_value" : "7.7.0", "version_affected" : "=" }, { "version_value" : "7.7.1", "version_affected" : "=" }, { "version_value" : "7.7.2", "version_affected" : "=" }, { "version_value" : "7.8.0", "version_affected" : "=" }, { "version_value" : "7.8.1", "version_affected" : "=" }, { "version_value" : "7.8.2", "version_affected" : "=" }, { "version_value" : "7.8.3", "version_affected" : "=" }, { "version_value" : "7.8.4", "version_affected" : "=" }, { "version_value" : "7.9.0", "version_affected" : "=" }, { "version_value" : "7.9.1", "version_affected" : "=" }, { "version_value" : "7.9.2", "version_affected" : "=" }, { "version_value" : "7.9.3", "version_affected" : "=" }, { "version_value" : "7.9.4", "version_affected" : "=" }, { "version_value" : "7.10.0", "version_affected" : "=" }, { "version_value" : "7.10.1", "version_affected" : "=" }, { "version_value" : "7.10.2", "version_affected" : "=" }, { "version_value" : "7.10.3", "version_affected" : "=" }, { "version_value" : "7.10.4", "version_affected" : "=" }, { "version_value" : "7.10.5", "version_affected" : "=" }, { "version_value" : "7.11.0", "version_affected" : "=" }, { "version_value" : "7.11.1", "version_affected" : "=" }, { "version_value" : "7.11.2", "version_affected" : "=" }, { "version_value" : "7.11.3", "version_affected" : "=" }, { "version_value" : "7.11.4", "version_affected" : "=" }, { "version_value" : "7.12.0", "version_affected" : "=" }, { "version_value" : "7.12.1", "version_affected" : "=" }, { "version_value" : "7.12.2", "version_affected" : "=" }, { "version_value" : "7.13.0", "version_affected" : "=" }, { "version_value" : "7.13.1", "version_affected" : "=" }, { "version_value" : "7.13.2", "version_affected" : "=" }, { "version_value" : "7.13.3", "version_affected" : "=" }, { "version_value" : "7.13.4", "version_affected" : "=" }, { "version_value" : "7.13.5", "version_affected" : "=" }, { "version_value" : "7.14.0", "version_affected" : "=" }, { "version_value" : "7.14.1", "version_affected" : "=" }, { "version_value" : "7.14.2", "version_affected" : "=" }, { "version_value" : "7.14.3", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.1.0", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.2.0", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" }, { "version_value" : "8.2.3", "version_affected" : "=" }, { "version_value" : "8.2.4", "version_affected" : "=" }, { "version_value" : "8.2.5", "version_affected" : "=" }, { "version_value" : "8.2.6", "version_affected" : "=" }, { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-918" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/8167", "name" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/8167", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerability in the Prometheus integration." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-11T16:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19496", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51301", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51301", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "10.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "10.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-11T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19569", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109118", "name" : "109118", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/50319", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/50319", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.8.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.8.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T18:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19570", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109169", "name" : "109169", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52392", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52392", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.3.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.3.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-16T12:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19571", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-918" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53242", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53242", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.18.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.18.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.7, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.1, "impactScore" : 4.0 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T17:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19572", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.3.12", "version_affected" : "=" }, { "version_value" : "11.3.13", "version_affected" : "=" }, { "version_value" : "11.3.14", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.4.9", "version_affected" : "=" }, { "version_value" : "11.4.10", "version_affected" : "=" }, { "version_value" : "11.4.11", "version_affected" : "=" }, { "version_value" : "11.4.12", "version_affected" : "=" }, { "version_value" : "11.4.13", "version_affected" : "=" }, { "version_value" : "11.4.14", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-pages/issues/98", "name" : "https://gitlab.com/gitlab-org/gitlab-pages/issues/98", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.3.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.17.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.3.12", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.3.12", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.9", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.9", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T19:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19573", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109164", "name" : "109164", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/45906", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/45906", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-16T12:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19574", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "7.6.0", "version_affected" : "=" }, { "version_value" : "7.6.1", "version_affected" : "=" }, { "version_value" : "7.6.2", "version_affected" : "=" }, { "version_value" : "7.7.0", "version_affected" : "=" }, { "version_value" : "7.7.1", "version_affected" : "=" }, { "version_value" : "7.7.2", "version_affected" : "=" }, { "version_value" : "7.8.0", "version_affected" : "=" }, { "version_value" : "7.8.1", "version_affected" : "=" }, { "version_value" : "7.8.2", "version_affected" : "=" }, { "version_value" : "7.8.3", "version_affected" : "=" }, { "version_value" : "7.8.4", "version_affected" : "=" }, { "version_value" : "7.9.0", "version_affected" : "=" }, { "version_value" : "7.9.1", "version_affected" : "=" }, { "version_value" : "7.9.2", "version_affected" : "=" }, { "version_value" : "7.9.3", "version_affected" : "=" }, { "version_value" : "7.9.4", "version_affected" : "=" }, { "version_value" : "7.10.0", "version_affected" : "=" }, { "version_value" : "7.10.1", "version_affected" : "=" }, { "version_value" : "7.10.2", "version_affected" : "=" }, { "version_value" : "7.10.3", "version_affected" : "=" }, { "version_value" : "7.10.4", "version_affected" : "=" }, { "version_value" : "7.10.5", "version_affected" : "=" }, { "version_value" : "7.11.0", "version_affected" : "=" }, { "version_value" : "7.11.1", "version_affected" : "=" }, { "version_value" : "7.11.2", "version_affected" : "=" }, { "version_value" : "7.11.3", "version_affected" : "=" }, { "version_value" : "7.11.4", "version_affected" : "=" }, { "version_value" : "7.12.0", "version_affected" : "=" }, { "version_value" : "7.12.1", "version_affected" : "=" }, { "version_value" : "7.12.2", "version_affected" : "=" }, { "version_value" : "7.13.0", "version_affected" : "=" }, { "version_value" : "7.13.1", "version_affected" : "=" }, { "version_value" : "7.13.2", "version_affected" : "=" }, { "version_value" : "7.13.3", "version_affected" : "=" }, { "version_value" : "7.13.4", "version_affected" : "=" }, { "version_value" : "7.13.5", "version_affected" : "=" }, { "version_value" : "7.14.0", "version_affected" : "=" }, { "version_value" : "7.14.1", "version_affected" : "=" }, { "version_value" : "7.14.2", "version_affected" : "=" }, { "version_value" : "7.14.3", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.1.0", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.2.0", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" }, { "version_value" : "8.2.3", "version_affected" : "=" }, { "version_value" : "8.2.4", "version_affected" : "=" }, { "version_value" : "8.2.5", "version_affected" : "=" }, { "version_value" : "8.2.6", "version_affected" : "=" }, { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109163", "name" : "109163", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/42057", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/42057", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "7.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "7.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-16T10:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19575", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109121", "name" : "109121", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52523", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52523", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "10.1.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "10.1.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T19:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19576", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51238", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/51238", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19577", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109179", "name" : "109179", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52444", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52444", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.6.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-16T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19578", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/54228", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/54228", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T17:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53917", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/53917", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T17:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19580", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.5", "version_affected" : "=" }, { "version_value" : "0.9.6", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.8.2", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.4.1", "version_affected" : "=" }, { "version_value" : "5.4.2", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.4.2", "version_affected" : "=" }, { "version_value" : "6.4.3", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.6.0", "version_affected" : "=" }, { "version_value" : "6.6.1", "version_affected" : "=" }, { "version_value" : "6.6.2", "version_affected" : "=" }, { "version_value" : "6.6.3", "version_affected" : "=" }, { "version_value" : "6.6.4", "version_affected" : "=" }, { "version_value" : "6.6.5", "version_affected" : "=" }, { "version_value" : "6.7.0", "version_affected" : "=" }, { "version_value" : "6.7.1", "version_affected" : "=" }, { "version_value" : "6.7.2", "version_affected" : "=" }, { "version_value" : "6.7.3", "version_affected" : "=" }, { "version_value" : "6.7.4", "version_affected" : "=" }, { "version_value" : "6.7.5", "version_affected" : "=" }, { "version_value" : "6.8.0", "version_affected" : "=" }, { "version_value" : "6.8.1", "version_affected" : "=" }, { "version_value" : "6.8.2", "version_affected" : "=" }, { "version_value" : "6.9.0", "version_affected" : "=" }, { "version_value" : "6.9.1", "version_affected" : "=" }, { "version_value" : "6.9.2", "version_affected" : "=" }, { "version_value" : "6.9.3", "version_affected" : "=" }, { "version_value" : "6.9.4", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.3.3", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "=" }, { "version_value" : "7.4.3", "version_affected" : "=" }, { "version_value" : "7.4.4", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.1", "version_affected" : "=" }, { "version_value" : "7.5.2", "version_affected" : "=" }, { "version_value" : "7.5.3", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "=" }, { "version_value" : "7.6.1", "version_affected" : "=" }, { "version_value" : "7.6.2", "version_affected" : "=" }, { "version_value" : "7.7.0", "version_affected" : "=" }, { "version_value" : "7.7.1", "version_affected" : "=" }, { "version_value" : "7.7.2", "version_affected" : "=" }, { "version_value" : "7.8.0", "version_affected" : "=" }, { "version_value" : "7.8.1", "version_affected" : "=" }, { "version_value" : "7.8.2", "version_affected" : "=" }, { "version_value" : "7.8.3", "version_affected" : "=" }, { "version_value" : "7.8.4", "version_affected" : "=" }, { "version_value" : "7.9.0", "version_affected" : "=" }, { "version_value" : "7.9.1", "version_affected" : "=" }, { "version_value" : "7.9.2", "version_affected" : "=" }, { "version_value" : "7.9.3", "version_affected" : "=" }, { "version_value" : "7.9.4", "version_affected" : "=" }, { "version_value" : "7.10.0", "version_affected" : "=" }, { "version_value" : "7.10.1", "version_affected" : "=" }, { "version_value" : "7.10.2", "version_affected" : "=" }, { "version_value" : "7.10.3", "version_affected" : "=" }, { "version_value" : "7.10.4", "version_affected" : "=" }, { "version_value" : "7.10.5", "version_affected" : "=" }, { "version_value" : "7.11.0", "version_affected" : "=" }, { "version_value" : "7.11.1", "version_affected" : "=" }, { "version_value" : "7.11.2", "version_affected" : "=" }, { "version_value" : "7.11.3", "version_affected" : "=" }, { "version_value" : "7.11.4", "version_affected" : "=" }, { "version_value" : "7.12.0", "version_affected" : "=" }, { "version_value" : "7.12.1", "version_affected" : "=" }, { "version_value" : "7.12.2", "version_affected" : "=" }, { "version_value" : "7.13.0", "version_affected" : "=" }, { "version_value" : "7.13.1", "version_affected" : "=" }, { "version_value" : "7.13.2", "version_affected" : "=" }, { "version_value" : "7.13.3", "version_affected" : "=" }, { "version_value" : "7.13.4", "version_affected" : "=" }, { "version_value" : "7.13.5", "version_affected" : "=" }, { "version_value" : "7.14.0", "version_affected" : "=" }, { "version_value" : "7.14.1", "version_affected" : "=" }, { "version_value" : "7.14.2", "version_affected" : "=" }, { "version_value" : "7.14.3", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.1.0", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.2.0", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" }, { "version_value" : "8.2.3", "version_affected" : "=" }, { "version_value" : "8.2.4", "version_affected" : "=" }, { "version_value" : "8.2.5", "version_affected" : "=" }, { "version_value" : "8.2.6", "version_affected" : "=" }, { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.3.12", "version_affected" : "=" }, { "version_value" : "11.3.13", "version_affected" : "=" }, { "version_value" : "11.3.14", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.4.9", "version_affected" : "=" }, { "version_value" : "11.4.10", "version_affected" : "=" }, { "version_value" : "11.4.11", "version_affected" : "=" }, { "version_value" : "11.4.12", "version_affected" : "=" }, { "version_value" : "11.4.13", "version_affected" : "=" }, { "version_value" : "11.4.14", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/39809", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/39809", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.3.12", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.3.12", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.9", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.9", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T18:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19581", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/7696", "name" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/7696", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.3.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T18:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19582", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/8180", "name" : "https://gitlab.com/gitlab-org/gitlab-ee/issues/8180", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T18:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19583", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.1.0", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.2.0", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "8.2.2", "version_affected" : "=" }, { "version_value" : "8.2.3", "version_affected" : "=" }, { "version_value" : "8.2.4", "version_affected" : "=" }, { "version_value" : "8.2.5", "version_affected" : "=" }, { "version_value" : "8.2.6", "version_affected" : "=" }, { "version_value" : "8.3.0", "version_affected" : "=" }, { "version_value" : "8.3.1", "version_affected" : "=" }, { "version_value" : "8.3.2", "version_affected" : "=" }, { "version_value" : "8.3.3", "version_affected" : "=" }, { "version_value" : "8.3.4", "version_affected" : "=" }, { "version_value" : "8.3.5", "version_affected" : "=" }, { "version_value" : "8.3.6", "version_affected" : "=" }, { "version_value" : "8.3.7", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" }, { "version_value" : "8.3.9", "version_affected" : "=" }, { "version_value" : "8.3.10", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.3", "version_affected" : "=" }, { "version_value" : "8.4.4", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.5.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "8.5.2", "version_affected" : "=" }, { "version_value" : "8.5.3", "version_affected" : "=" }, { "version_value" : "8.5.4", "version_affected" : "=" }, { "version_value" : "8.5.5", "version_affected" : "=" }, { "version_value" : "8.5.6", "version_affected" : "=" }, { "version_value" : "8.5.7", "version_affected" : "=" }, { "version_value" : "8.5.8", "version_affected" : "=" }, { "version_value" : "8.5.9", "version_affected" : "=" }, { "version_value" : "8.5.10", "version_affected" : "=" }, { "version_value" : "8.5.11", "version_affected" : "=" }, { "version_value" : "8.5.12", "version_affected" : "=" }, { "version_value" : "8.5.13", "version_affected" : "=" }, { "version_value" : "8.6.0", "version_affected" : "=" }, { "version_value" : "8.6.1", "version_affected" : "=" }, { "version_value" : "8.6.2", "version_affected" : "=" }, { "version_value" : "8.6.3", "version_affected" : "=" }, { "version_value" : "8.6.4", "version_affected" : "=" }, { "version_value" : "8.6.5", "version_affected" : "=" }, { "version_value" : "8.6.6", "version_affected" : "=" }, { "version_value" : "8.6.7", "version_affected" : "=" }, { "version_value" : "8.6.8", "version_affected" : "=" }, { "version_value" : "8.6.9", "version_affected" : "=" }, { "version_value" : "8.7.0", "version_affected" : "=" }, { "version_value" : "8.7.1", "version_affected" : "=" }, { "version_value" : "8.7.2", "version_affected" : "=" }, { "version_value" : "8.7.3", "version_affected" : "=" }, { "version_value" : "8.7.4", "version_affected" : "=" }, { "version_value" : "8.7.5", "version_affected" : "=" }, { "version_value" : "8.7.6", "version_affected" : "=" }, { "version_value" : "8.7.7", "version_affected" : "=" }, { "version_value" : "8.7.8", "version_affected" : "=" }, { "version_value" : "8.7.9", "version_affected" : "=" }, { "version_value" : "8.8.0", "version_affected" : "=" }, { "version_value" : "8.8.1", "version_affected" : "=" }, { "version_value" : "8.8.2", "version_affected" : "=" }, { "version_value" : "8.8.3", "version_affected" : "=" }, { "version_value" : "8.8.4", "version_affected" : "=" }, { "version_value" : "8.8.5", "version_affected" : "=" }, { "version_value" : "8.8.6", "version_affected" : "=" }, { "version_value" : "8.8.7", "version_affected" : "=" }, { "version_value" : "8.8.8", "version_affected" : "=" }, { "version_value" : "8.8.9", "version_affected" : "=" }, { "version_value" : "8.9.0", "version_affected" : "=" }, { "version_value" : "8.9.1", "version_affected" : "=" }, { "version_value" : "8.9.2", "version_affected" : "=" }, { "version_value" : "8.9.3", "version_affected" : "=" }, { "version_value" : "8.9.4", "version_affected" : "=" }, { "version_value" : "8.9.5", "version_affected" : "=" }, { "version_value" : "8.9.6", "version_affected" : "=" }, { "version_value" : "8.9.7", "version_affected" : "=" }, { "version_value" : "8.9.8", "version_affected" : "=" }, { "version_value" : "8.9.9", "version_affected" : "=" }, { "version_value" : "8.9.10", "version_affected" : "=" }, { "version_value" : "8.9.11", "version_affected" : "=" }, { "version_value" : "8.10.0", "version_affected" : "=" }, { "version_value" : "8.10.1", "version_affected" : "=" }, { "version_value" : "8.10.2", "version_affected" : "=" }, { "version_value" : "8.10.3", "version_affected" : "=" }, { "version_value" : "8.10.4", "version_affected" : "=" }, { "version_value" : "8.10.5", "version_affected" : "=" }, { "version_value" : "8.10.6", "version_affected" : "=" }, { "version_value" : "8.10.7", "version_affected" : "=" }, { "version_value" : "8.10.8", "version_affected" : "=" }, { "version_value" : "8.10.9", "version_affected" : "=" }, { "version_value" : "8.10.10", "version_affected" : "=" }, { "version_value" : "8.10.11", "version_affected" : "=" }, { "version_value" : "8.10.12", "version_affected" : "=" }, { "version_value" : "8.10.13", "version_affected" : "=" }, { "version_value" : "8.11.0", "version_affected" : "=" }, { "version_value" : "8.11.1", "version_affected" : "=" }, { "version_value" : "8.11.2", "version_affected" : "=" }, { "version_value" : "8.11.3", "version_affected" : "=" }, { "version_value" : "8.11.4", "version_affected" : "=" }, { "version_value" : "8.11.5", "version_affected" : "=" }, { "version_value" : "8.11.6", "version_affected" : "=" }, { "version_value" : "8.11.7", "version_affected" : "=" }, { "version_value" : "8.11.8", "version_affected" : "=" }, { "version_value" : "8.11.9", "version_affected" : "=" }, { "version_value" : "8.11.10", "version_affected" : "=" }, { "version_value" : "8.11.11", "version_affected" : "=" }, { "version_value" : "8.12.0", "version_affected" : "=" }, { "version_value" : "8.12.1", "version_affected" : "=" }, { "version_value" : "8.12.2", "version_affected" : "=" }, { "version_value" : "8.12.3", "version_affected" : "=" }, { "version_value" : "8.12.4", "version_affected" : "=" }, { "version_value" : "8.12.5", "version_affected" : "=" }, { "version_value" : "8.12.6", "version_affected" : "=" }, { "version_value" : "8.12.7", "version_affected" : "=" }, { "version_value" : "8.12.8", "version_affected" : "=" }, { "version_value" : "8.12.9", "version_affected" : "=" }, { "version_value" : "8.12.10", "version_affected" : "=" }, { "version_value" : "8.12.11", "version_affected" : "=" }, { "version_value" : "8.12.12", "version_affected" : "=" }, { "version_value" : "8.12.13", "version_affected" : "=" }, { "version_value" : "8.13.0", "version_affected" : "=" }, { "version_value" : "8.13.1", "version_affected" : "=" }, { "version_value" : "8.13.2", "version_affected" : "=" }, { "version_value" : "8.13.3", "version_affected" : "=" }, { "version_value" : "8.13.4", "version_affected" : "=" }, { "version_value" : "8.13.5", "version_affected" : "=" }, { "version_value" : "8.13.6", "version_affected" : "=" }, { "version_value" : "8.13.7", "version_affected" : "=" }, { "version_value" : "8.13.8", "version_affected" : "=" }, { "version_value" : "8.13.9", "version_affected" : "=" }, { "version_value" : "8.13.10", "version_affected" : "=" }, { "version_value" : "8.13.11", "version_affected" : "=" }, { "version_value" : "8.13.12", "version_affected" : "=" }, { "version_value" : "8.14.0", "version_affected" : "=" }, { "version_value" : "8.14.1", "version_affected" : "=" }, { "version_value" : "8.14.2", "version_affected" : "=" }, { "version_value" : "8.14.3", "version_affected" : "=" }, { "version_value" : "8.14.4", "version_affected" : "=" }, { "version_value" : "8.14.5", "version_affected" : "=" }, { "version_value" : "8.14.6", "version_affected" : "=" }, { "version_value" : "8.14.7", "version_affected" : "=" }, { "version_value" : "8.14.8", "version_affected" : "=" }, { "version_value" : "8.14.9", "version_affected" : "=" }, { "version_value" : "8.14.10", "version_affected" : "=" }, { "version_value" : "8.15.0", "version_affected" : "=" }, { "version_value" : "8.15.1", "version_affected" : "=" }, { "version_value" : "8.15.2", "version_affected" : "=" }, { "version_value" : "8.15.3", "version_affected" : "=" }, { "version_value" : "8.15.4", "version_affected" : "=" }, { "version_value" : "8.15.5", "version_affected" : "=" }, { "version_value" : "8.15.6", "version_affected" : "=" }, { "version_value" : "8.15.7", "version_affected" : "=" }, { "version_value" : "8.15.8", "version_affected" : "=" }, { "version_value" : "8.16.0", "version_affected" : "=" }, { "version_value" : "8.16.1", "version_affected" : "=" }, { "version_value" : "8.16.2", "version_affected" : "=" }, { "version_value" : "8.16.3", "version_affected" : "=" }, { "version_value" : "8.16.4", "version_affected" : "=" }, { "version_value" : "8.16.5", "version_affected" : "=" }, { "version_value" : "8.16.6", "version_affected" : "=" }, { "version_value" : "8.16.7", "version_affected" : "=" }, { "version_value" : "8.16.8", "version_affected" : "=" }, { "version_value" : "8.16.9", "version_affected" : "=" }, { "version_value" : "8.17.0", "version_affected" : "=" }, { "version_value" : "8.17.1", "version_affected" : "=" }, { "version_value" : "8.17.2", "version_affected" : "=" }, { "version_value" : "8.17.3", "version_affected" : "=" }, { "version_value" : "8.17.4", "version_affected" : "=" }, { "version_value" : "8.17.5", "version_affected" : "=" }, { "version_value" : "8.17.6", "version_affected" : "=" }, { "version_value" : "8.17.7", "version_affected" : "=" }, { "version_value" : "8.17.8", "version_affected" : "=" }, { "version_value" : "8.18.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "=" }, { "version_value" : "9.0.4", "version_affected" : "=" }, { "version_value" : "9.0.5", "version_affected" : "=" }, { "version_value" : "9.0.6", "version_affected" : "=" }, { "version_value" : "9.0.7", "version_affected" : "=" }, { "version_value" : "9.0.8", "version_affected" : "=" }, { "version_value" : "9.0.9", "version_affected" : "=" }, { "version_value" : "9.0.10", "version_affected" : "=" }, { "version_value" : "9.0.11", "version_affected" : "=" }, { "version_value" : "9.0.12", "version_affected" : "=" }, { "version_value" : "9.0.13", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.8", "version_affected" : "=" }, { "version_value" : "9.1.9", "version_affected" : "=" }, { "version_value" : "9.1.10", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.2.10", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.3.7", "version_affected" : "=" }, { "version_value" : "9.3.8", "version_affected" : "=" }, { "version_value" : "9.3.9", "version_affected" : "=" }, { "version_value" : "9.3.10", "version_affected" : "=" }, { "version_value" : "9.3.11", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.4.4", "version_affected" : "=" }, { "version_value" : "9.4.5", "version_affected" : "=" }, { "version_value" : "9.4.6", "version_affected" : "=" }, { "version_value" : "9.4.7", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "9.5.5", "version_affected" : "=" }, { "version_value" : "9.5.6", "version_affected" : "=" }, { "version_value" : "9.5.7", "version_affected" : "=" }, { "version_value" : "9.5.8", "version_affected" : "=" }, { "version_value" : "9.5.9", "version_affected" : "=" }, { "version_value" : "9.5.10", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7.0", "version_affected" : "=" }, { "version_value" : "10.7.1", "version_affected" : "=" }, { "version_value" : "10.7.2", "version_affected" : "=" }, { "version_value" : "10.7.3", "version_affected" : "=" }, { "version_value" : "10.7.4", "version_affected" : "=" }, { "version_value" : "10.7.5", "version_affected" : "=" }, { "version_value" : "10.7.6", "version_affected" : "=" }, { "version_value" : "10.7.7", "version_affected" : "=" }, { "version_value" : "10.8.0", "version_affected" : "=" }, { "version_value" : "10.8.1", "version_affected" : "=" }, { "version_value" : "10.8.2", "version_affected" : "=" }, { "version_value" : "10.8.3", "version_affected" : "=" }, { "version_value" : "10.8.4", "version_affected" : "=" }, { "version_value" : "10.8.5", "version_affected" : "=" }, { "version_value" : "10.8.6", "version_affected" : "=" }, { "version_value" : "10.8.7", "version_affected" : "=" }, { "version_value" : "10.9.0", "version_affected" : "=" }, { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-532" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109166", "name" : "109166", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-workhorse/issues/182", "name" : "https://gitlab.com/gitlab-org/gitlab-workhorse/issues/182", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "8.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "8.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T11:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19584", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitlab", "product" : { "product_data" : [ { "product_name" : "gitlab", "version" : { "version_data" : [ { "version_value" : "11.0.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.0.6", "version_affected" : "=" }, { "version_value" : "11.1.0", "version_affected" : "=" }, { "version_value" : "11.1.1", "version_affected" : "=" }, { "version_value" : "11.1.2", "version_affected" : "=" }, { "version_value" : "11.1.3", "version_affected" : "=" }, { "version_value" : "11.1.4", "version_affected" : "=" }, { "version_value" : "11.1.5", "version_affected" : "=" }, { "version_value" : "11.1.6", "version_affected" : "=" }, { "version_value" : "11.1.7", "version_affected" : "=" }, { "version_value" : "11.1.8", "version_affected" : "=" }, { "version_value" : "11.2.0", "version_affected" : "=" }, { "version_value" : "11.2.1", "version_affected" : "=" }, { "version_value" : "11.2.2", "version_affected" : "=" }, { "version_value" : "11.2.3", "version_affected" : "=" }, { "version_value" : "11.2.4", "version_affected" : "=" }, { "version_value" : "11.2.5", "version_affected" : "=" }, { "version_value" : "11.2.6", "version_affected" : "=" }, { "version_value" : "11.2.7", "version_affected" : "=" }, { "version_value" : "11.2.8", "version_affected" : "=" }, { "version_value" : "11.3.0", "version_affected" : "=" }, { "version_value" : "11.3.1", "version_affected" : "=" }, { "version_value" : "11.3.2", "version_affected" : "=" }, { "version_value" : "11.3.3", "version_affected" : "=" }, { "version_value" : "11.3.4", "version_affected" : "=" }, { "version_value" : "11.3.5", "version_affected" : "=" }, { "version_value" : "11.3.6", "version_affected" : "=" }, { "version_value" : "11.3.7", "version_affected" : "=" }, { "version_value" : "11.3.8", "version_affected" : "=" }, { "version_value" : "11.3.9", "version_affected" : "=" }, { "version_value" : "11.3.10", "version_affected" : "=" }, { "version_value" : "11.4.0", "version_affected" : "=" }, { "version_value" : "11.4.1", "version_affected" : "=" }, { "version_value" : "11.4.2", "version_affected" : "=" }, { "version_value" : "11.4.3", "version_affected" : "=" }, { "version_value" : "11.4.4", "version_affected" : "=" }, { "version_value" : "11.4.5", "version_affected" : "=" }, { "version_value" : "11.4.6", "version_affected" : "=" }, { "version_value" : "11.4.7", "version_affected" : "=" }, { "version_value" : "11.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "name" : "https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52522", "name" : "https://gitlab.com/gitlab-org/gitlab-ce/issues/52522", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.0.0", "versionEndExcluding" : "11.3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.4.0", "versionEndExcluding" : "11.4.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "versionStartIncluding" : "11.5.0", "versionEndExcluding" : "11.5.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-11T18:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19588", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alarm", "product" : { "product_data" : [ { "product_name" : "adc-v522ir_firmware", "version" : { "version_data" : [ { "version_value" : "0100b9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vfxcomputing.com/?CVE-2018-19588", "name" : "https://www.vfxcomputing.com/?CVE-2018-19588", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:alarm:adc-v522ir_firmware:0100b9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:alarm:adc-v522ir:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T16:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-19629", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.oppositionsecurity.com/imagenow-7-1-4-dos/", "name" : "https://www.oppositionsecurity.com/imagenow-7-1-4-dos/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Denial of Service vulnerability in the ImageNow Server service in Hyland Perceptive Content Server before 7.1.5 allows an attacker to crash the service via a TCP connection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hyland:perceptive_content_server:*:*:*:*:*:*:*:*", "versionEndExcluding" : "7.1.5" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-19T17:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-1968", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10958077", "name" : "http://www.ibm.com/support/docview.wss?uid=ibm10958077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/153749", "name" : "ibm-sim-cve20181968-info-disc (153749)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.0.1", "versionEndIncluding" : "7.0.1.12" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-14T21:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-2021", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "qradar_security_information_and_event_manager", "version" : { "version_data" : [ { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.2.8", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/155345", "name" : "ibm-qradar-cve20182021-xss (155345)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10888117", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10888117", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155345." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.2.0", "versionEndIncluding" : "7.2.8.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.3.0", "versionEndIncluding" : "7.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-17T17:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-2022", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "qradar_security_information_and_event_manager", "version" : { "version_data" : [ { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.2.8", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/155346", "name" : "ibm-qradar-cve20182022-info-disc (155346)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10888133", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10888133", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 155346." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.2.0", "versionEndIncluding" : "7.2.8.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.3.0", "versionEndIncluding" : "7.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-17T17:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-20851", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "helpy.io", "product" : { "product_data" : [ { "product_name" : "helpy", "version" : { "version_data" : [ { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1.1", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.9.9", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/helpyio/helpy/commit/a26dd854deb17e36a605f91a6f51d128e98d3818", "name" : "https://github.com/helpyio/helpy/commit/a26dd854deb17e36a605f91a6f51d128e98d3818", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/helpyio/helpy/compare/d64e97a...592bc60", "name" : "https://github.com/helpyio/helpy/compare/d64e97a...592bc60", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Helpy before 2.2.0 allows agents to edit admins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:helpy.io:helpy:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.2.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T13:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-20852", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "python", "product" : { "product_data" : [ { "product_name" : "python", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.150", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.2150", "version_affected" : "=" }, { "version_value" : "2.6.6150", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.7.3", "version_affected" : "=" }, { "version_value" : "2.7.4", "version_affected" : "=" }, { "version_value" : "2.7.5", "version_affected" : "=" }, { "version_value" : "2.7.6", "version_affected" : "=" }, { "version_value" : "2.7.7", "version_affected" : "=" }, { "version_value" : "2.7.8", "version_affected" : "=" }, { "version_value" : "2.7.9", "version_affected" : "=" }, { "version_value" : "2.7.10", "version_affected" : "=" }, { "version_value" : "2.7.11", "version_affected" : "=" }, { "version_value" : "2.7.12", "version_affected" : "=" }, { "version_value" : "2.7.13", "version_affected" : "=" }, { "version_value" : "2.7.14", "version_affected" : "=" }, { "version_value" : "2.7.15", "version_affected" : "=" }, { "version_value" : "2.7.16", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.2150", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.2150", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.python.org/issue35121", "name" : "https://bugs.python.org/issue35121", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://python-security.readthedocs.io/vuln/cookie-domain-check.html", "name" : "https://python-security.readthedocs.io/vuln/cookie-domain-check.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0", "versionEndIncluding" : "2.7.16" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.4.10" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.5.0", "versionEndExcluding" : "3.5.7" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.6.0", "versionEndExcluding" : "3.6.9" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.7.0", "versionEndExcluding" : "3.7.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-13T21:15Z", "lastModifiedDate" : "2019-07-18T15:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2018-7838", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03", "name" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-03", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CWE-119 Buffer Errors vulnerability exists in Modicon M580 CPU - BMEP582040, all versions before V2.90, and Modicon Ethernet Module BMENOC0301, all versions before V2.16, which could cause denial of service on the FTP service of the controller or the Ethernet BMENOC module when it receives a FTP CWD command with a data length greater than 1020 bytes. A power cycle is then needed to reactivate the FTP service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-16T12:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0046", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "juniper", "product" : { "product_data" : [ { "product_name" : "junos", "version" : { "version_data" : [ { "version_value" : "18.2", "version_affected" : "=" }, { "version_value" : "16.1", "version_affected" : "=" }, { "version_value" : "17.1", "version_affected" : "=" }, { "version_value" : "17.2", "version_affected" : "=" }, { "version_value" : "17.3", "version_affected" : "=" }, { "version_value" : "17.4", "version_affected" : "=" }, { "version_value" : "18.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109272", "name" : "109272", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://kb.juniper.net/JSA10938", "name" : "https://kb.juniper.net/JSA10938", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.5, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-19T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0048", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "juniper", "product" : { "product_data" : [ { "product_name" : "junos", "version" : { "version_data" : [ { "version_value" : "18.2", "version_affected" : "=" }, { "version_value" : "14.1x53", "version_affected" : "=" }, { "version_value" : "17.1", "version_affected" : "=" }, { "version_value" : "17.2", "version_affected" : "=" }, { "version_value" : "17.3", "version_affected" : "=" }, { "version_value" : "17.4", "version_affected" : "=" }, { "version_value" : "18.1", "version_affected" : "=" }, { "version_value" : "18.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-254" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.juniper.net/JSA10942", "name" : "https://kb.juniper.net/JSA10942", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall filter is applied on the loopback interface, other firewall filters might stop working for multicast traffic. The command 'show firewall filter' can be used to confirm whether the filter is working. This issue only affects the EX4300 switch. No other products or platforms are affected by this vulnerability. This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D51, 14.1X53-D115 on EX4300 Series; 17.1 versions prior to 17.1R3 on EX4300 Series; 17.2 versions prior to 17.2R3-S2 on EX4300 Series; 17.3 versions prior to 17.3R3-S3 on EX4300 Series; 17.4 versions prior to 17.4R2-S5, 17.4R3 on EX4300 Series; 18.1 versions prior to 18.1R3-S1 on EX4300 Series; 18.2 versions prior to 18.2R2 on EX4300 Series; 18.3 versions prior to 18.3R2 on EX4300 Series." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d48:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:14.1x53:d49:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.8, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-19T14:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0049", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "juniper", "product" : { "product_data" : [ { "product_name" : "junos", "version" : { "version_data" : [ { "version_value" : "18.2", "version_affected" : "=" }, { "version_value" : "16.1", "version_affected" : "=" }, { "version_value" : "16.2", "version_affected" : "=" }, { "version_value" : "17.1", "version_affected" : "=" }, { "version_value" : "17.2", "version_affected" : "=" }, { "version_value" : "17.2x75", "version_affected" : "=" }, { "version_value" : "17.3", "version_affected" : "=" }, { "version_value" : "17.4", "version_affected" : "=" }, { "version_value" : "18.1", "version_affected" : "=" }, { "version_value" : "18.2x75", "version_affected" : "=" }, { "version_value" : "18.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.juniper.net/JSA10943", "name" : "https://kb.juniper.net/JSA10943", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. Repeated crashes of the RPD process can cause prolonged Denial of Service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S3; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.2X75 versions prior to 17.2X75-D105; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S7, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D30; 18.3 versions prior to 18.3R1-S4, 18.3R2. Junos OS releases prior to 16.1R1 are not affected." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:juniper:junos:18.2:r1-s5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2x75:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.2x75:d20:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2x75:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2x75:d102:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:juniper:junos:17.2x75:d92:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-19T14:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0052", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109145", "name" : "109145", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://kb.juniper.net/JSA10946", "name" : "https://kb.juniper.net/JSA10946", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-11T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0053", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.juniper.net/JSA10947", "name" : "https://kb.juniper.net/JSA10947", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/45982", "name" : "https://www.exploit-db.com/exploits/45982", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client ? accessible from the CLI or shell ? in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-11T20:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0234", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "roller", "version" : { "version_data" : [ { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.apache.org/thread.html/26cdef3fa8a8fa7fcbb99320aa860836ead124b414c654a4d12674cf@%3Cdev.roller.apache.org%3E", "name" : "https://lists.apache.org/thread.html/26cdef3fa8a8fa7fcbb99320aa860836ead124b414c654a4d12674cf@%3Cdev.roller.apache.org%3E", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math Comment Authenticator did not property sanitize user input and could be exploited to perform Reflected Cross Site Scripting (XSS). The mitigation for this vulnerability is to upgrade to the latest version of Roller, which is now Roller 5.2.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:roller:5.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:roller:5.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:roller:5.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T22:15Z", "lastModifiedDate" : "2019-07-18T13:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0281", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "openui5", "version" : { "version_data" : [ { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.26.5", "version_affected" : "=" }, { "version_value" : "1.26.6", "version_affected" : "=" }, { "version_value" : "1.26.7", "version_affected" : "=" }, { "version_value" : "1.26.8", "version_affected" : "=" }, { "version_value" : "1.26.9", "version_affected" : "=" }, { "version_value" : "1.26.10", "version_affected" : "=" }, { "version_value" : "1.26.11", "version_affected" : "=" }, { "version_value" : "1.26.12", "version_affected" : "=" }, { "version_value" : "1.26.13", "version_affected" : "=" }, { "version_value" : "1.26.14", "version_affected" : "=" }, { "version_value" : "1.26.15", "version_affected" : "=" }, { "version_value" : "1.26.16", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.28.0", "version_affected" : "=" }, { "version_value" : "1.28.1", "version_affected" : "=" }, { "version_value" : "1.28.2", "version_affected" : "=" }, { "version_value" : "1.28.3", "version_affected" : "=" }, { "version_value" : "1.28.4", "version_affected" : "=" }, { "version_value" : "1.28.5", "version_affected" : "=" }, { "version_value" : "1.28.6", "version_affected" : "=" }, { "version_value" : "1.28.7", "version_affected" : "=" }, { "version_value" : "1.28.8", "version_affected" : "=" }, { "version_value" : "1.28.9", "version_affected" : "=" }, { "version_value" : "1.28.10", "version_affected" : "=" }, { "version_value" : "1.28.11", "version_affected" : "=" }, { "version_value" : "1.28.12", "version_affected" : "=" }, { "version_value" : "1.28.13", "version_affected" : "=" }, { "version_value" : "1.28.14", "version_affected" : "=" }, { "version_value" : "1.28.15", "version_affected" : "=" }, { "version_value" : "1.28.16", "version_affected" : "=" }, { "version_value" : "1.28.17", "version_affected" : "=" }, { "version_value" : "1.28.18", "version_affected" : "=" }, { "version_value" : "1.28.19", "version_affected" : "=" }, { "version_value" : "1.28.20", "version_affected" : "=" }, { "version_value" : "1.28.21", "version_affected" : "=" }, { "version_value" : "1.28.22", "version_affected" : "=" }, { "version_value" : "1.28.23", "version_affected" : "=" }, { "version_value" : "1.28.24", "version_affected" : "=" }, { "version_value" : "1.28.25", "version_affected" : "=" }, { "version_value" : "1.28.26", "version_affected" : "=" }, { "version_value" : "1.28.27", "version_affected" : "=" }, { "version_value" : "1.28.28", "version_affected" : "=" }, { "version_value" : "1.28.29", "version_affected" : "=" }, { "version_value" : "1.28.30", "version_affected" : "=" }, { "version_value" : "1.28.31", "version_affected" : "=" }, { "version_value" : "1.28.32", "version_affected" : "=" }, { "version_value" : "1.28.33", "version_affected" : "=" }, { "version_value" : "1.28.34", "version_affected" : "=" }, { "version_value" : "1.28.35", "version_affected" : "=" }, { "version_value" : "1.28.36", "version_affected" : "=" }, { "version_value" : "1.28.37", "version_affected" : "=" }, { "version_value" : "1.28.38", "version_affected" : "=" }, { "version_value" : "1.28.39", "version_affected" : "=" }, { "version_value" : "1.28.40", "version_affected" : "=" }, { "version_value" : "1.28.41", "version_affected" : "=" }, { "version_value" : "1.28.42", "version_affected" : "=" }, { "version_value" : "1.28.43", "version_affected" : "=" }, { "version_value" : "1.28.44", "version_affected" : "=" }, { "version_value" : "1.28.45", "version_affected" : "=" }, { "version_value" : "1.28.46", "version_affected" : "=" }, { "version_value" : "1.28.47", "version_affected" : "=" }, { "version_value" : "1.28.48", "version_affected" : "=" }, { "version_value" : "1.28.49", "version_affected" : "=" }, { "version_value" : "1.28.50", "version_affected" : "=" }, { "version_value" : "1.28.51", "version_affected" : "=" }, { "version_value" : "1.28.52", "version_affected" : "=" }, { "version_value" : "1.29.0", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.30.2", "version_affected" : "=" }, { "version_value" : "1.30.3", "version_affected" : "=" }, { "version_value" : "1.30.4", "version_affected" : "=" }, { "version_value" : "1.30.5", "version_affected" : "=" }, { "version_value" : "1.30.6", "version_affected" : "=" }, { "version_value" : "1.30.7", "version_affected" : "=" }, { "version_value" : "1.30.8", "version_affected" : "=" }, { "version_value" : "1.30.9", "version_affected" : "=" }, { "version_value" : "1.30.10", "version_affected" : "=" }, { "version_value" : "1.30.11", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" }, { "version_value" : "1.32.2", "version_affected" : "=" }, { "version_value" : "1.32.3", "version_affected" : "=" }, { "version_value" : "1.32.4", "version_affected" : "=" }, { "version_value" : "1.32.5", "version_affected" : "=" }, { "version_value" : "1.32.6", "version_affected" : "=" }, { "version_value" : "1.32.7", "version_affected" : "=" }, { "version_value" : "1.32.8", "version_affected" : "=" }, { "version_value" : "1.32.9", "version_affected" : "=" }, { "version_value" : "1.32.10", "version_affected" : "=" }, { "version_value" : "1.32.11", "version_affected" : "=" }, { "version_value" : "1.32.12", "version_affected" : "=" }, { "version_value" : "1.32.13", "version_affected" : "=" }, { "version_value" : "1.32.14", "version_affected" : "=" }, { "version_value" : "1.32.15", "version_affected" : "=" }, { "version_value" : "1.32.16", "version_affected" : "=" }, { "version_value" : "1.32.17", "version_affected" : "=" }, { "version_value" : "1.34.0", "version_affected" : "=" }, { "version_value" : "1.34.1", "version_affected" : "=" }, { "version_value" : "1.34.2", "version_affected" : "=" }, { "version_value" : "1.34.3", "version_affected" : "=" }, { "version_value" : "1.34.4", "version_affected" : "=" }, { "version_value" : "1.34.5", "version_affected" : "=" }, { "version_value" : "1.34.6", "version_affected" : "=" }, { "version_value" : "1.34.7", "version_affected" : "=" }, { "version_value" : "1.34.8", "version_affected" : "=" }, { "version_value" : "1.34.9", "version_affected" : "=" }, { "version_value" : "1.34.10", "version_affected" : "=" }, { "version_value" : "1.34.11", "version_affected" : "=" }, { "version_value" : "1.34.12", "version_affected" : "=" }, { "version_value" : "1.36.0", "version_affected" : "=" }, { "version_value" : "1.36.1", "version_affected" : "=" }, { "version_value" : "1.36.2", "version_affected" : "=" }, { "version_value" : "1.36.3", "version_affected" : "=" }, { "version_value" : "1.36.4", "version_affected" : "=" }, { "version_value" : "1.36.5", "version_affected" : "=" }, { "version_value" : "1.36.6", "version_affected" : "=" }, { "version_value" : "1.36.7", "version_affected" : "=" }, { "version_value" : "1.36.8", "version_affected" : "=" }, { "version_value" : "1.36.9", "version_affected" : "=" }, { "version_value" : "1.36.10", "version_affected" : "=" }, { "version_value" : "1.36.11", "version_affected" : "=" }, { "version_value" : "1.36.12", "version_affected" : "=" }, { "version_value" : "1.36.13", "version_affected" : "=" }, { "version_value" : "1.36.14", "version_affected" : "=" }, { "version_value" : "1.36.15", "version_affected" : "=" }, { "version_value" : "1.36.16", "version_affected" : "=" }, { "version_value" : "1.38.0", "version_affected" : "=" }, { "version_value" : "1.38.1", "version_affected" : "=" }, { "version_value" : "1.38.2", "version_affected" : "=" }, { "version_value" : "1.38.3", "version_affected" : "=" }, { "version_value" : "1.38.4", "version_affected" : "=" }, { "version_value" : "1.38.5", "version_affected" : "=" }, { "version_value" : "1.38.6", "version_affected" : "=" }, { "version_value" : "1.38.7", "version_affected" : "=" }, { "version_value" : "1.38.8", "version_affected" : "=" }, { "version_value" : "1.38.9", "version_affected" : "=" }, { "version_value" : "1.38.10", "version_affected" : "=" }, { "version_value" : "1.38.11", "version_affected" : "=" }, { "version_value" : "1.38.12", "version_affected" : "=" }, { "version_value" : "1.38.13", "version_affected" : "=" }, { "version_value" : "1.38.14", "version_affected" : "=" }, { "version_value" : "1.38.15", "version_affected" : "=" }, { "version_value" : "1.38.16", "version_affected" : "=" }, { "version_value" : "1.38.17", "version_affected" : "=" }, { "version_value" : "1.38.18", "version_affected" : "=" }, { "version_value" : "1.38.19", "version_affected" : "=" }, { "version_value" : "1.38.20", "version_affected" : "=" }, { "version_value" : "1.38.21", "version_affected" : "=" }, { "version_value" : "1.38.22", "version_affected" : "=" }, { "version_value" : "1.38.23", "version_affected" : "=" }, { "version_value" : "1.38.24", "version_affected" : "=" }, { "version_value" : "1.38.25", "version_affected" : "=" }, { "version_value" : "1.38.26", "version_affected" : "=" }, { "version_value" : "1.38.27", "version_affected" : "=" }, { "version_value" : "1.38.28", "version_affected" : "=" }, { "version_value" : "1.38.29", "version_affected" : "=" }, { "version_value" : "1.38.30", "version_affected" : "=" }, { "version_value" : "1.38.31", "version_affected" : "=" }, { "version_value" : "1.38.32", "version_affected" : "=" }, { "version_value" : "1.38.33", "version_affected" : "=" }, { "version_value" : "1.38.34", "version_affected" : "=" }, { "version_value" : "1.38.35", "version_affected" : "=" }, { "version_value" : "1.38.36", "version_affected" : "=" }, { "version_value" : "1.38.37", "version_affected" : "=" }, { "version_value" : "1.38.38", "version_affected" : "=" }, { "version_value" : "1.40.0", "version_affected" : "=" }, { "version_value" : "1.40.1", "version_affected" : "=" }, { "version_value" : "1.40.2", "version_affected" : "=" }, { "version_value" : "1.40.3", "version_affected" : "=" }, { "version_value" : "1.40.4", "version_affected" : "=" }, { "version_value" : "1.40.5", "version_affected" : "=" }, { "version_value" : "1.40.6", "version_affected" : "=" }, { "version_value" : "1.40.7", "version_affected" : "=" }, { "version_value" : "1.40.8", "version_affected" : "=" }, { "version_value" : "1.40.9", "version_affected" : "=" }, { "version_value" : "1.40.10", "version_affected" : "=" }, { "version_value" : "1.40.11", "version_affected" : "=" }, { "version_value" : "1.40.12", "version_affected" : "=" }, { "version_value" : "1.40.13", "version_affected" : "=" }, { "version_value" : "1.40.14", "version_affected" : "=" }, { "version_value" : "1.40.15", "version_affected" : "=" }, { "version_value" : "1.40.16", "version_affected" : "=" }, { "version_value" : "1.40.17", "version_affected" : "=" }, { "version_value" : "1.40.18", "version_affected" : "=" }, { "version_value" : "1.42.0", "version_affected" : "=" }, { "version_value" : "1.42.1", "version_affected" : "=" }, { "version_value" : "1.42.2", "version_affected" : "=" }, { "version_value" : "1.42.3", "version_affected" : "=" }, { "version_value" : "1.42.4", "version_affected" : "=" }, { "version_value" : "1.42.5", "version_affected" : "=" }, { "version_value" : "1.42.6", "version_affected" : "=" }, { "version_value" : "1.42.7", "version_affected" : "=" }, { "version_value" : "1.42.8", "version_affected" : "=" }, { "version_value" : "1.42.9", "version_affected" : "=" }, { "version_value" : "1.44.0", "version_affected" : "=" }, { "version_value" : "1.44.1", "version_affected" : "=" }, { "version_value" : "1.44.2", "version_affected" : "=" }, { "version_value" : "1.44.3", "version_affected" : "=" }, { "version_value" : "1.44.4", "version_affected" : "=" }, { "version_value" : "1.44.5", "version_affected" : "=" }, { "version_value" : "1.44.6", "version_affected" : "=" }, { "version_value" : "1.44.7", "version_affected" : "=" }, { "version_value" : "1.44.8", "version_affected" : "=" }, { "version_value" : "1.44.9", "version_affected" : "=" }, { "version_value" : "1.44.10", "version_affected" : "=" }, { "version_value" : "1.44.11", "version_affected" : "=" }, { "version_value" : "1.44.12", "version_affected" : "=" }, { "version_value" : "1.44.13", "version_affected" : "=" }, { "version_value" : "1.44.14", "version_affected" : "=" }, { "version_value" : "1.44.15", "version_affected" : "=" }, { "version_value" : "1.44.16", "version_affected" : "=" }, { "version_value" : "1.44.17", "version_affected" : "=" }, { "version_value" : "1.44.18", "version_affected" : "=" }, { "version_value" : "1.44.19", "version_affected" : "=" }, { "version_value" : "1.44.20", "version_affected" : "=" }, { "version_value" : "1.44.21", "version_affected" : "=" }, { "version_value" : "1.44.22", "version_affected" : "=" }, { "version_value" : "1.44.23", "version_affected" : "=" }, { "version_value" : "1.44.24", "version_affected" : "=" }, { "version_value" : "1.44.25", "version_affected" : "=" }, { "version_value" : "1.44.26", "version_affected" : "=" }, { "version_value" : "1.44.27", "version_affected" : "=" }, { "version_value" : "1.44.28", "version_affected" : "=" }, { "version_value" : "1.44.29", "version_affected" : "=" }, { "version_value" : "1.44.30", "version_affected" : "=" }, { "version_value" : "1.44.31", "version_affected" : "=" }, { "version_value" : "1.44.32", "version_affected" : "=" }, { "version_value" : "1.44.33", "version_affected" : "=" }, { "version_value" : "1.44.34", "version_affected" : "=" }, { "version_value" : "1.44.35", "version_affected" : "=" }, { "version_value" : "1.44.36", "version_affected" : "=" }, { "version_value" : "1.44.37", "version_affected" : "=" }, { "version_value" : "1.44.38", "version_affected" : "=" }, { "version_value" : "1.50.0", "version_affected" : "=" }, { "version_value" : "1.50.1", "version_affected" : "=" }, { "version_value" : "1.50.2", "version_affected" : "=" }, { "version_value" : "1.50.3", "version_affected" : "=" }, { "version_value" : "1.50.4", "version_affected" : "=" }, { "version_value" : "1.50.5", "version_affected" : "=" }, { "version_value" : "1.50.6", "version_affected" : "=" }, { "version_value" : "1.50.7", "version_affected" : "=" }, { "version_value" : "1.50.8", "version_affected" : "=" }, { "version_value" : "1.50.9", "version_affected" : "=" }, { "version_value" : "1.52.0", "version_affected" : "=" }, { "version_value" : "1.52.1", "version_affected" : "=" }, { "version_value" : "1.52.2", "version_affected" : "=" }, { "version_value" : "1.52.3", "version_affected" : "=" }, { "version_value" : "1.52.4", "version_affected" : "=" }, { "version_value" : "1.52.5", "version_affected" : "=" }, { "version_value" : "1.52.6", "version_affected" : "=" }, { "version_value" : "1.52.7", "version_affected" : "=" }, { "version_value" : "1.52.8", "version_affected" : "=" }, { "version_value" : "1.52.9", "version_affected" : "=" }, { "version_value" : "1.52.10", "version_affected" : "=" }, { "version_value" : "1.52.11", "version_affected" : "=" }, { "version_value" : "1.52.12", "version_affected" : "=" }, { "version_value" : "1.52.13", "version_affected" : "=" }, { "version_value" : "1.52.14", "version_affected" : "=" }, { "version_value" : "1.52.15", "version_affected" : "=" }, { "version_value" : "1.52.16", "version_affected" : "=" }, { "version_value" : "1.52.17", "version_affected" : "=" }, { "version_value" : "1.52.18", "version_affected" : "=" }, { "version_value" : "1.52.19", "version_affected" : "=" }, { "version_value" : "1.52.20", "version_affected" : "=" }, { "version_value" : "1.52.21", "version_affected" : "=" }, { "version_value" : "1.52.22", "version_affected" : "=" }, { "version_value" : "1.52.23", "version_affected" : "=" }, { "version_value" : "1.52.24", "version_affected" : "=" }, { "version_value" : "1.60.0", "version_affected" : "=" }, { "version_value" : "1.60.1", "version_affected" : "=" }, { "version_value" : "1.60.2", "version_affected" : "=" }, { "version_value" : "1.60.3", "version_affected" : "=" }, { "version_value" : "1.60.4", "version_affected" : "=" }, { "version_value" : "1.60.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109077", "name" : "109077", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2756539", "name" : "https://launchpad.support.sap.com/#/notes/2756539", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:openui5:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.38.39" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:openui5:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.40.0", "versionEndExcluding" : "1.44.39" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:openui5:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.50.0", "versionEndExcluding" : "1.52.25" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:openui5:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.60.0", "versionEndExcluding" : "1.60.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-18T12:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0318", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "netweaver_application_server_java", "version" : { "version_data" : [ { "version_value" : "7.21", "version_affected" : "=" }, { "version_value" : "7.22", "version_affected" : "=" }, { "version_value" : "7.45", "version_affected" : "=" }, { "version_value" : "7.49", "version_affected" : "=" }, { "version_value" : "7.53", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109069", "name" : "109069", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2738791", "name" : "https://launchpad.support.sap.com/#/notes/2738791", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.53:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.6, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-17T19:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0319", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "gateway", "version" : { "version_data" : [ { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.51", "version_affected" : "=" }, { "version_value" : "7.52", "version_affected" : "=" }, { "version_value" : "7.53", "version_affected" : "=" } ] } }, { "product_name" : "ui5", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-74" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html", "name" : "http://packetstormsecurity.com/files/153661/SAPUI5-1.0.0-SAP-Gateway-7.5-7.51-7.52-7.53-Content-Spoofing.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109074", "name" : "109074", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://cxsecurity.com/ascii/WLB-2019050283", "name" : "https://cxsecurity.com/ascii/WLB-2019050283", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f", "name" : "https://drive.google.com/open?id=1aGFqggvydehSK7MFIsfKW7tO60yiF55f", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2752614", "name" : "https://launchpad.support.sap.com/#/notes/2752614", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SAP Gateway, versions 7.5, 7.51, 7.52 and 7.53, allows an attacker to inject content which is displayed in the form of an error message. An attacker could thus mislead a user to believe this information is from the legitimate service when it's not." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:gateway:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:gateway:7.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:gateway:7.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:gateway:7.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:ui5:1.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-18T18:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0321", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "netweaver_as_abap", "version" : { "version_data" : [ { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.31", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109078", "name" : "109078", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2773888", "name" : "https://launchpad.support.sap.com/#/notes/2773888", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ABAP Server and ABAP Platform (SAP Basis), versions, 7.31, 7.4, 7.5, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_as_abap:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_as_abap:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_as_abap:7.31:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-19T12:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0322", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "commerce_cloud", "version" : { "version_data" : [ { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.7", "version_affected" : "=" }, { "version_value" : "1808", "version_affected" : "=" }, { "version_value" : "1811", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109076", "name" : "109076", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2781873", "name" : "https://launchpad.support.sap.com/#/notes/2781873", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:1808:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:commerce_cloud:1811:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-18T14:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0325", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "erp_hcm", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109075", "name" : "109075", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2798133", "name" : "https://launchpad.support.sap.com/#/notes/2798133", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAP ERP HCM (SAP_HRCES) , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain access to the same data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:erp_hcm:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.2, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.6, "impactScore" : 2.5 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-18T17:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0326", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "businessobjects_business_intelligence", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109072", "name" : "109072", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2764733", "name" : "https://launchpad.support.sap.com/#/notes/2764733", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAP BusinessObjects Business Intelligence Platform (BI Workspace) (Enterprise), versions 4.1, 4.2, 4.3, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:businessobjects_business_intelligence:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:businessobjects_business_intelligence:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:businessobjects_business_intelligence:4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-17T18:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0327", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "netweaver_application_server_java", "version" : { "version_data" : [ { "version_value" : "7.10", "version_affected" : "=" }, { "version_value" : "7.20", "version_affected" : "=" }, { "version_value" : "7.30", "version_affected" : "=" }, { "version_value" : "7.31", "version_affected" : "=" }, { "version_value" : "7.40", "version_affected" : "=" }, { "version_value" : "7.50", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109071", "name" : "109071", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2777910", "name" : "https://launchpad.support.sap.com/#/notes/2777910", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAP NetWeaver for Java Application Server - Web Container, (engineapi, versions 7.1, 7.2, 7.3, 7.31, 7.4 and 7.5), (servercode, versions 7.2, 7.3, 7.31, 7.4, 7.5), allows an attacker to upload files (including script files) without proper file format validation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-18T13:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0328", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "netweaver_process_integration", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "7.31", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109067", "name" : "109067", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2774489", "name" : "https://launchpad.support.sap.com/#/notes/2774489", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ABAP Tests Modules (SAP Basis, versions 7.0, 7.1, 7.3, 7.31, 7.4, 7.5) of SAP NetWeaver Process Integration enables an attacker the execution of OS commands with privileged rights. An attacker could thereby impact the integrity and availability of the system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:netweaver_process_integration:7.31:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-18T13:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0329", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "information_steward", "version" : { "version_data" : [ { "version_value" : "4.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109070", "name" : "109070", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2804833", "name" : "https://launchpad.support.sap.com/#/notes/2804833", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SAP Information Steward, version 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:information_steward:4.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-14T22:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0330", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "diagnostics_agents", "version" : { "version_data" : [ { "version_value" : "7.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109068", "name" : "109068", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://launchpad.support.sap.com/#/notes/2808158", "name" : "https://launchpad.support.sap.com/#/notes/2808158", "refsource" : "MISC", "tags" : [ "Permissions Required", "Vendor Advisory" ] }, { "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "name" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The OS Command Plugin in the transaction GPA_ADMIN and the OSCommand Console of SAP Diagnostic Agent (LM-Service), version 7.2, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:diagnostics_agents:7.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-15T19:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0785", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0785", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0785", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0811", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0811", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0811", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T13:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0865", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0865", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0865", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures., aka 'SymCrypt Denial of Service Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-15T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0880", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0880", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0887", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0887", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka 'Remote Desktop Services Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.0, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.1, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T13:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0962", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "azure_automation", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0962", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0962", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in Azure Automation \"RunAs account\" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:azure_automation:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0966", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0966", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0966", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.8, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 4.0 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 5.1, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-18T14:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0975", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-15T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-0999", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0999", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0999", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1001", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1001", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1001", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1004, CVE-2019-1056, CVE-2019-1059." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1004", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1004", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1004", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1056, CVE-2019-1059." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1006", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" } ] } }, { "product_name" : "identitymodel", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_enterprise_server", "version" : { "version_data" : [ { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_foundation", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2019", "version_affected" : "=" } ] } }, { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:identitymodel:7.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010003", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "leanote", "product" : { "product_data" : [ { "product_name" : "leanote", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/leanote/leanote/issues/719", "name" : "https://github.com/leanote/leanote/issues/719", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Leanote prior to version 2.6 is affected by: Cross Site Scripting (XSS)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:leanote:leanote:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T13:15Z", "lastModifiedDate" : "2019-07-12T18:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010004", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "soundexchange", "product" : { "product_data" : [ { "product_name" : "sound_exchange", "version" : { "version_data" : [ { "version_value" : "14.4.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceforge.net/p/sox/bugs/299/", "name" : "https://sourceforge.net/p/sox/bugs/299/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://sourceforge.net/p/sox/code/ci/master/tree/src/xa.c#l219", "name" : "https://sourceforge.net/p/sox/code/ci/master/tree/src/xa.c#l219", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:219. The attack vector is: Victim must open specially crafted .xa file. NOTE: this may overlap CVE-2017-18189." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:soundexchange:sound_exchange:*:*:*:*:*:*:*:*", "versionEndIncluding" : "14.4.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T02:15Z", "lastModifiedDate" : "2019-07-15T17:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010005", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hexoeditor_project", "product" : { "product_data" : [ { "product_name" : "hexoeditor", "version" : { "version_data" : [ { "version_value" : "1.1.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/Moeditor/Moeditor/issues/156", "name" : "https://github.com/Moeditor/Moeditor/issues/156", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://github.com/zhuzhuyule/HexoEditor/issues/3", "name" : "https://github.com/zhuzhuyule/HexoEditor/issues/3", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HexoEditor v1.1.8-beta is affected by: XSS to code execution." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hexoeditor_project:hexoeditor:1.1.8:beta:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T02:15Z", "lastModifiedDate" : "2019-07-16T19:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010006", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "evince", "version" : { "version_data" : [ { "version_value" : "3.26.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.maptools.org/show_bug.cgi?id=2745", "name" : "http://bugzilla.maptools.org/show_bug.cgi?id=2745", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=788980", "name" : "https://bugzilla.gnome.org/show_bug.cgi?id=788980", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:evince:3.26.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T02:15Z", "lastModifiedDate" : "2019-07-16T22:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010008", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openenergymonitor", "product" : { "product_data" : [ { "product_name" : "emoncms", "version" : { "version_data" : [ { "version_value" : "9.8.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/emoncms/emoncms/issues/763", "name" : "https://github.com/emoncms/emoncms/issues/763", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, but might potentially enable persistent XSS (user could embed mal. code). The component is: Javascript code execution in \"Name\", \"Location\", \"Bio\" and \"Starting Page\" fields in the \"My Account\" page. File: Lib/listjs/list.js, line 67. The attack vector is: unknown, victim must open profile page if persistent was possible." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openenergymonitor:emoncms:9.8.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T02:15Z", "lastModifiedDate" : "2019-07-18T13:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010009", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/kaendfinger/3ad1dbeb62f902cc3ac2867f4e01ae38", "name" : "https://gist.github.com/kaendfinger/3ad1dbeb62f902cc3ac2867f4e01ae38", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DGLogik Inc DGLux Server All Versions is affected by: Insecure Permissions. The impact is: Remote Execution, Credential Leaks. The component is: IoT API. The attack vector is: Any Accessible Server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T03:15Z", "lastModifiedDate" : "2019-07-15T12:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010011", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10753, CVE-2018-10771. Reason: This candidate is a reservation duplicate of CVE-2018-10753 and CVE-2018-10771. Notes: All CVE users should reference CVE-2018-10753 and CVE-2018-10771 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T03:15Z", "lastModifiedDate" : "2019-07-16T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010016", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dolibarr", "product" : { "product_data" : [ { "product_name" : "dolibarr", "version" : { "version_data" : [ { "version_value" : "6.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/Dolibarr/dolibarr/issues/7962", "name" : "https://github.com/Dolibarr/dolibarr/issues/7962", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dolibarr:dolibarr:6.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T03:15Z", "lastModifiedDate" : "2019-07-15T14:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010017", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libnmap", "product" : { "product_data" : [ { "product_name" : "libnmap", "version" : { "version_data" : [ { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.2.3", "version_affected" : "=" }, { "version_value" : "0.2.4", "version_affected" : "=" }, { "version_value" : "0.2.5", "version_affected" : "=" }, { "version_value" : "0.2.6", "version_affected" : "=" }, { "version_value" : "0.2.7", "version_affected" : "=" }, { "version_value" : "0.2.8", "version_affected" : "=" }, { "version_value" : "0.2.9", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-91" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/savon-noir/python-libnmap/issues/87", "name" : "https://github.com/savon-noir/python-libnmap/issues/87", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libnmap:libnmap:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.6.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T03:15Z", "lastModifiedDate" : "2019-07-17T18:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010018", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zammad", "product" : { "product_data" : [ { "product_name" : "zammad", "version" : { "version_data" : [ { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d", "name" : "https://github.com/zammad/zammad/compare/5c983f6...1a9af7d", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/zammad/zammad/compare/ea50d0c...238784d", "name" : "https://github.com/zammad/zammad/compare/ea50d0c...238784d", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/zammad/zammad/issues/1869", "name" : "https://github.com/zammad/zammad/issues/1869", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The impact is: Execute java script code on users browser. The component is: web app. The attack vector is: the victim must open a ticket. The fixed version is: 2.3.1, 2.2.2 and 2.1.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.1.0", "versionEndIncluding" : "2.1.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zammad:zammad:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.2.0", "versionEndIncluding" : "2.2.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zammad:zammad:2.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-18T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010022", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22850", "name" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22850", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-18T15:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010023", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109167", "name" : "109167", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22851", "name" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22851", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-18T15:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010024", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109162", "name" : "109162", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22852", "name" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22852", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-18T15:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010025", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22853", "name" : "https://sourceware.org/bugzilla/show_bug.cgi?id=22853", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-18T15:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010028", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "school_college_portal_with_erp_script_project", "product" : { "product_data" : [ { "product_name" : "school_college_portal_with_erp_script", "version" : { "version_data" : [ { "version_value" : "2.6.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://whitehatck01.blogspot.com/2018/02/school-college-portal-with-erp-script.html", "name" : "https://whitehatck01.blogspot.com/2018/02/school-college-portal-with-erp-script.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/send_reply/. The attack vector is: ." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:school_college_portal_with_erp_script_project:school_college_portal_with_erp_script:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-15T14:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010030", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11501. Reason: This candidate is a reservation duplicate of CVE-2018-11501. Notes: All CVE users should reference CVE-2018-11501 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T04:15Z", "lastModifiedDate" : "2019-07-15T05:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010034", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "deepsoft", "product" : { "product_data" : [ { "product_name" : "weblibrarian", "version" : { "version_data" : [ { "version_value" : "3.5.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://plugins.trac.wordpress.org/browser/weblibrarian/trunk/includes/database_code.php", "name" : "https://plugins.trac.wordpress.org/browser/weblibrarian/trunk/includes/database_code.php", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function \"AllBarCodes\" (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESC." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:deepsoft:weblibrarian:*:*:*:*:*:wordpress:*:*", "versionEndIncluding" : "3.5.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T13:15Z", "lastModifiedDate" : "2019-07-19T14:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010038", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://trac.openmodelica.org/OpenModelica/ticket/4787#trac-add-comment", "name" : "https://trac.openmodelica.org/OpenModelica/ticket/4787#trac-add-comment", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenModelica OMCompiler is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: OPENMODELICAHOME parameter changeable via environment variable. The attack vector is: Changing an environment variable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T13:15Z", "lastModifiedDate" : "2019-07-15T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010039", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/AKuHAK/uLaunchELF/issues/14", "name" : "https://github.com/AKuHAK/uLaunchELF/issues/14", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "uLaunchELF < commit 170827a is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Loader program (loader.c) overly trusts the arguments provided via command line." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ulaunchelf_project:ulaunchelf:*:*:*:*:*:*:*:*", "versionEndExcluding" : "commit_170827a" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T14:15Z", "lastModifiedDate" : "2019-07-16T14:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010042", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7662. Reason: This candidate is a reservation duplicate of CVE-2018-7662. Notes: All CVE users should reference CVE-2018-7662 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T16:15Z", "lastModifiedDate" : "2019-07-16T19:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010043", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/ec-/Quake3e/issues/9", "name" : "https://github.com/ec-/Quake3e/issues/9", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Quake3e < 5ed740d is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Argument string creation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-16T14:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010044", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "archivesunleashed", "product" : { "product_data" : [ { "product_name" : "graphpass", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/archivesunleashed/borg-reducer/issues/4", "name" : "https://github.com/archivesunleashed/borg-reducer/issues/4", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "borg-reducer c6d5240 is affected by: Buffer Overflow. The impact is: Possible code execution and denial of service. The component is: Output parameter within the executable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:archivesunleashed:graphpass:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T16:15Z", "lastModifiedDate" : "2019-07-17T18:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010048", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-17T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010054", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dolibarr", "product" : { "product_data" : [ { "product_name" : "dolibarr", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF", "name" : "https://github.com/lucasgcilento/CVE/blob/master/Dolibarr_CSRF", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and password encryptation. The attack vector is: admin access malitious urls." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dolibarr:dolibarr:7.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T13:15Z", "lastModifiedDate" : "2019-07-19T02:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010057", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/phaag/nfdump/issues/104", "name" : "https://github.com/phaag/nfdump/issues/104", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-16T14:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010060", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458", "name" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/astropy/astropy/pull/7274", "name" : "https://github.com/astropy/astropy/pull/7274", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gz", "name" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gz", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3430.tar.gz", "name" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3430.tar.gz", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txt", "name" : "https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-16T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010061", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10364. Reason: This candidate is a reservation duplicate of CVE-2018-10364. Notes: All CVE users should reference CVE-2018-10364 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-16T19:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010062", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/pluck-cms/pluck/commit/09f0ab871bf633973cfd9fc4fe59d4a912397cf8", "name" : "https://github.com/pluck-cms/pluck/commit/09f0ab871bf633973cfd9fc4fe59d4a912397cf8", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/pluck-cms/pluck/issues/44", "name" : "https://github.com/pluck-cms/pluck/issues/44", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is: data/inc/images.php line36. The attack vector is: modify the MIME TYPE on HTTP request to upload a php file. The fixed version is: after commit 09f0ab871bf633973cfd9fc4fe59d4a912397cf8." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-16T14:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010065", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/sleuthkit/sleuthkit/commit/114cd3d0aac8bd1aeaf4b33840feb0163d342d5b", "name" : "https://github.com/sleuthkit/sleuthkit/commit/114cd3d0aac8bd1aeaf4b33840feb0163d342d5b", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://issuetracker.google.com/issues/77809383", "name" : "https://issuetracker.google.com/issues/77809383", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Sleuth Kit 4.6.0 and earlier is affected by: Integer Overflow. The impact is: Opening crafted disk image triggers crash in tsk/fs/hfs_dent.c:237. The component is: Overflow in fls tool used on HFS image. Bug is in tsk/fs/hfs.c file in function hfs_cat_traverse() in lines: 952, 1062. The attack vector is: Victim must open a crafted HFS filesystem image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010066", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/LLNL/msr-safe/compare/v1.1.0...v1.2.0", "name" : "https://github.com/LLNL/msr-safe/compare/v1.1.0...v1.2.0", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.tldp.org/LDP/lkmpg/2.4/html/x856.html", "name" : "https://www.tldp.org/LDP/lkmpg/2.4/html/x856.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in order to write to model specific registers, normally a function reserved for the root user. The fixed version is: v1.2.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T14:15Z", "lastModifiedDate" : "2019-07-18T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010069", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "moinejf", "product" : { "product_data" : [ { "product_name" : "abcm2ps", "version" : { "version_data" : [ { "version_value" : "8.13.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/drive/u/2/folders/1Y2IbtEr9v4l4Ruie_AY9BFJOHOGiDt7S", "name" : "https://drive.google.com/drive/u/2/folders/1Y2IbtEr9v4l4Ruie_AY9BFJOHOGiDt7S", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/leesavide/abcm2ps/issues/18", "name" : "https://github.com/leesavide/abcm2ps/issues/18", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted file. The component is: front.c, function txt_add. The fixed version is: after commit commit 08aef597656d065e86075f3d53fda89765845eae." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:moinejf:abcm2ps:8.13.20:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T14:15Z", "lastModifiedDate" : "2019-07-19T19:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010073", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceforge.net/p/bacnet/bugs/55/", "name" : "https://sourceforge.net/p/bacnet/bugs/55/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://sourceforge.net/p/bacnet/code/3169/", "name" : "https://sourceforge.net/p/bacnet/code/3169/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BACnet Stack bacserv 0.9.1 and 0.8.5 is affected by: Buffer Overflow. The impact is: exploit was not explored. The component is: bacserv BVLC forwarded NPDU. bvlc_bdt_forward_npdu() calls bvlc_encode_forwarded_npdu() which copies the content from the request into a local in the bvlc_bdt_forward_npdu() stack frame and clobbers the canary. The attack vector is: A BACnet/IP device with BBMD enabled based on this library connected to IP network. The fixed version is: 0.8.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T14:15Z", "lastModifiedDate" : "2019-07-18T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010083", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.palletsprojects.com/blog/flask-1-0-released/", "name" : "https://www.palletsprojects.com/blog/flask-1-0-released/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:palletsprojects:flask:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-18T14:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010084", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/bigpresh/Dancer-Plugin-SimpleCRUD/pull/109", "name" : "https://github.com/bigpresh/Dancer-Plugin-SimpleCRUD/pull/109", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: Incorrect Access Control. The impact is: Potential for unathorised access to data. The component is: Incorrect calls to _ensure_auth() wrapper result in authentication-checking not being applied to al routes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-17T14:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010091", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tinymce/tinymce/issues/4394", "name" : "https://github.com/tinymce/tinymce/issues/4394", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media element's embed tab." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-17T18:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010094", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "domainmod", "product" : { "product_data" : [ { "product_name" : "domainmod", "version" : { "version_data" : [ { "version_value" : "4.10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/domainmod/domainmod/issues/65", "name" : "https://github.com/domainmod/domainmod/issues/65", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change admin password. The component is: http://127.0.0.1/settings/password/ http://127.0.0.1/admin/users/add.php http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:domainmod:domainmod:4.10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T13:15Z", "lastModifiedDate" : "2019-07-19T03:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "domainmod", "product" : { "product_data" : [ { "product_name" : "domainmod", "version" : { "version_data" : [ { "version_value" : "4.10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/domainmod/domainmod/issues/65", "name" : "https://github.com/domainmod/domainmod/issues/65", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "domainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can add the administrator account. The component is: http://127.0.0.1/admin/users/add.php. The attack vector is: After the administrator logged in, open the html page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:domainmod:domainmod:4.10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T13:15Z", "lastModifiedDate" : "2019-07-19T03:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010096", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "domainmod", "product" : { "product_data" : [ { "product_name" : "domainmod", "version" : { "version_data" : [ { "version_value" : "4.10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/domainmod/domainmod/issues/65", "name" : "https://github.com/domainmod/domainmod/issues/65", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "domainmod(https://domainmod.org/) domainmod v4.10.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: There is a CSRF vulnerability that can change the read-only user to admin. The component is: http://127.0.0.1/admin/users/edit.php?uid=2. The attack vector is: After the administrator logged in, open the html page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:domainmod:domainmod:4.10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T13:15Z", "lastModifiedDate" : "2019-07-19T03:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010100", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/oss-sec/2018/q2/146", "name" : "http://seclists.org/oss-sec/2018/q2/146", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers, portable executables (ALL executables on the web site). The attack vector is: CAPEC-471, CWE-426, CWE-427." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010101", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://seclists.org/oss-sec/2018/q2/146", "name" : "http://seclists.org/oss-sec/2018/q2/146", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer, portable executable (ALL executables available). The attack vector is: CWE-29, CWE-377, CWE-379." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010104", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://metalamin.github.io/Quick-Chat-SQLi-EN/", "name" : "https://metalamin.github.io/Quick-Chat-SQLi-EN/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TechyTalk Quick Chat WordPress Plugin All up to the latest is affected by: SQL Injection. The impact is: Access to the database. The component is: like_escape is used in Quick-chat.php line 399. The attack vector is: Crafted ajax request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T17:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010112", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/LiodAir/images/blob/master/csrf.md", "name" : "https://github.com/LiodAir/images/blob/master/csrf.md", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery (CSRF). The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010113", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/drive/folders/1UxgdL8SJO6KKnG3bh0-LTl7C6i41VwoW?usp=sharing", "name" : "https://drive.google.com/drive/folders/1UxgdL8SJO6KKnG3bh0-LTl7C6i41VwoW?usp=sharing", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Premium Software CLEditor 1.4.5 and earlier is affected by: Cross Site Scripting (XSS). The impact is: An attacker might be able to inject arbitrary html and script code into the web site. The component is: jQuery plug-in. The attack vector is: the victim must open a crafted href attribute of a link (A) element." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010136", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.exploit-db.com/exploits/45187/", "name" : "Exploit Database", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "https://www.shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.html", "name" : "https://www.shodan.io/search?query=title%3APLC++pstVal-%3Evalue%3Ahtml%2Findex.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ChinaMobile GPN2.4P21-C-CN W2001EN-00 is affected by: Incorrect Access Control - Unauthenticated Remote Reboot. The impact is: PLC Wireless Router's are vulnerable to an unauthenticated remote reboot due. The component is: Reboot settings are available to unauthenticated users instead of only authenticaed users. The attack vector is: Remote." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010142", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/secdev/scapy/pull/1409", "name" : "https://github.com/secdev/scapy/pull/1409", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058", "name" : "https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010151", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/Lz1y/24a6368c7ffdc1af7292035dd16a97f5", "name" : "https://gist.github.com/Lz1y/24a6368c7ffdc1af7292035dd16a97f5", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T14:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10102", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jetbrains", "product" : { "product_data" : [ { "product_name" : "kotlin", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.2.70", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/", "name" : "https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jetbrains:kotlin:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.3.30" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T20:15Z", "lastModifiedDate" : "2019-07-12T13:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010238", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gitlab.gnome.org/GNOME/pango/blob/master/pango/pango-bidi-type.c", "name" : "https://gitlab.gnome.org/GNOME/pango/blob/master/pango/pango-bidi-type.c", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010239", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/DaveGamble/cJSON/commit/be749d7efa7c9021da746e685bd6dec79f9dd99b", "name" : "https://github.com/DaveGamble/cJSON/commit/be749d7efa7c9021da746e685bd6dec79f9dd99b", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/DaveGamble/cJSON/issues/315", "name" : "https://github.com/DaveGamble/cJSON/issues/315", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The fixed version is: 1.7.9 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010241", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing", "name" : "https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010245", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/open?id=1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv", "name" : "https://drive.google.com/open?id=1OkMtrMgjjINsDUQwxpGxjbATB6hiwqyv", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://gerrit.onosproject.org/#/c/20767/", "name" : "https://gerrit.onosproject.org/#/c/20767/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The component is: apps/yang/src/main/java/org/onosproject/yang/impl/YangLiveCompilerManager.java. The attack vector is: network connectivity. The fixed version is: 1.15." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010246", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/MailCleaner/MailCleaner/commit/c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9", "name" : "https://github.com/MailCleaner/MailCleaner/commit/c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure (e.g. username, password). The component is: The API call in the function allowAction() in NewslettersController.php. The attack vector is: HTTP Get request. The fixed version is: c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010247", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/zmartzone/mod_auth_openidc/commit/132a4111bf3791e76437619a66336dce2ce4c79b", "name" : "https://github.com/zmartzone/mod_auth_openidc/commit/132a4111bf3791e76437619a66336dce2ce4c79b", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.3.10.2", "name" : "https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.3.10.2", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-001_mod_auth_openidc_reflected_xss.txt", "name" : "https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-001_mod_auth_openidc_reflected_xss.txt", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ZmartZone IAM mod_auth_openidc 2.3.10.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Redirecting the user to a phishing page or interacting with the application on behalf of the user. The component is: File: src/mod_auth_openidc.c, Line: 3109. The fixed version is: 2.3.10.2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010248", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceforge.net/projects/i-doit/files/i-doit/1.12.1/CHANGELOG/download", "name" : "https://sourceforge.net/projects/i-doit/files/i-doit/1.12.1/CHANGELOG/download", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010249", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "name" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://drive.google.com/open?id=1LxmTXZS-FRJQHAzO2JPgDx5SbLNEJHuJ", "name" : "https://drive.google.com/open?id=1LxmTXZS-FRJQHAzO2JPgDx5SbLNEJHuJ", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010250", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/open?id=17RsaP67w6M2xquQjFf2vXhX3dlVKMdC1", "name" : "https://drive.google.com/open?id=17RsaP67w6M2xquQjFf2vXhX3dlVKMdC1", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "name" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: createFlow() and createFlows() functions in FlowWebResource.java (RESTful service). The attack vector is: network management and connectivity." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010251", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe", "name" : "https://github.com/OISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/OISF/suricata/pull/3590/commits/8357ef3f8ffc7d99ef6571350724160de356158b", "name" : "https://github.com/OISF/suricata/pull/3590/commits/8357ef3f8ffc7d99ef6571350724160de356158b", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://redmine.openinfosecfoundation.org/issues/2736", "name" : "https://redmine.openinfosecfoundation.org/issues/2736", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed network packet. The component is: app-layer-detect-proto.c, decode.c, decode-teredo.c and decode-ipv6.c (https://github.com/OISF/suricata/pull/3590/commits/11f3659f64a4e42e90cb3c09fcef66894205aefe, https://github.com/OISF/suricata/pull/3590/commits/8357ef3f8ffc7d99ef6571350724160de356158b). The attack vector is: An attacker can trigger the vulnerability by sending a specifically crafted network request. The fixed version is: 4.1.2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010252", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/open?id=1ce1uqcJYI-sEENGbPmmw-uJTwCXTUyJn", "name" : "https://drive.google.com/open?id=1ce1uqcJYI-sEENGbPmmw-uJTwCXTUyJn", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "name" : "https://drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewD", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010259", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "saltstack", "product" : { "product_data" : [ { "product_name" : "salt_2018", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } }, { "product_name" : "salt_2019", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534", "name" : "https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/saltstack/salt/pull/51462", "name" : "https://github.com/saltstack/salt/pull/51462", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a", "name" : "https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:saltstack:salt_2018:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:saltstack:salt_2019:2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-19T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010261", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitea", "product" : { "product_data" : [ { "product_name" : "gitea", "version" : { "version_data" : [ { "version_value" : "1.7.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/go-gitea/gitea/pull/5905", "name" : "https://github.com/go-gitea/gitea/pull/5905", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gitea 1.7.0 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically crafted URL. The fixed version is: 1.7.1 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-19T19:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010262", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "scapy", "product" : { "product_data" : [ { "product_name" : "scapy", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-749" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058", "name" : "https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending/", "name" : "https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending/", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The component is: _RADIUSAttrPacketListField class. The attack vector is: a packet sent over the network or in a pcap. The fixed version is: after commit 0d7ae2b039f650a40e511d09eb961c782da025d9." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:scapy:scapy:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.4.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-19T19:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010263", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/DCIT/perl-Crypt-JWT/commit/b98a59b42ded9f9e51b2560410106207c2152d6c", "name" : "https://github.com/DCIT/perl-Crypt-JWT/commit/b98a59b42ded9f9e51b2560410106207c2152d6c", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.openwall.com/lists/oss-security/2018/09/07/1", "name" : "https://www.openwall.com/lists/oss-security/2018/09/07/1", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac(). The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit b98a59b42ded9f9e51b2560410106207c2152d6c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010266", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lodash", "product" : { "product_data" : [ { "product_name" : "lodash", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.9.2", "version_affected" : "=" }, { "version_value" : "3.9.3", "version_affected" : "=" }, { "version_value" : "3.10.0", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.8.0", "version_affected" : "=" }, { "version_value" : "4.8.1", "version_affected" : "=" }, { "version_value" : "4.8.2", "version_affected" : "=" }, { "version_value" : "4.9.0", "version_affected" : "=" }, { "version_value" : "4.10.0", "version_affected" : "=" }, { "version_value" : "4.11.0", "version_affected" : "=" }, { "version_value" : "4.11.1", "version_affected" : "=" }, { "version_value" : "4.11.2", "version_affected" : "=" }, { "version_value" : "4.12.0", "version_affected" : "=" }, { "version_value" : "4.13.0", "version_affected" : "=" }, { "version_value" : "4.13.1", "version_affected" : "=" }, { "version_value" : "4.14.0", "version_affected" : "=" }, { "version_value" : "4.14.1", "version_affected" : "=" }, { "version_value" : "4.14.2", "version_affected" : "=" }, { "version_value" : "4.15.0", "version_affected" : "=" }, { "version_value" : "4.16.0", "version_affected" : "=" }, { "version_value" : "4.16.1", "version_affected" : "=" }, { "version_value" : "4.16.2", "version_affected" : "=" }, { "version_value" : "4.16.3", "version_affected" : "=" }, { "version_value" : "4.16.4", "version_affected" : "=" }, { "version_value" : "4.16.5", "version_affected" : "=" }, { "version_value" : "4.16.6", "version_affected" : "=" }, { "version_value" : "4.17.0", "version_affected" : "=" }, { "version_value" : "4.17.1", "version_affected" : "=" }, { "version_value" : "4.17.2", "version_affected" : "=" }, { "version_value" : "4.17.3", "version_affected" : "=" }, { "version_value" : "4.17.4", "version_affected" : "=" }, { "version_value" : "4.17.5", "version_affected" : "=" }, { "version_value" : "4.17.9", "version_affected" : "=" }, { "version_value" : "4.17.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/lodash/lodash/issues/3359", "name" : "https://github.com/lodash/lodash/issues/3359", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://github.com/lodash/lodash/wiki/Changelog", "name" : "https://github.com/lodash/lodash/wiki/Changelog", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://snyk.io/vuln/SNYK-JS-LODASH-73639", "name" : "https://snyk.io/vuln/SNYK-JS-LODASH-73639", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*", "versionEndExcluding" : "4.17.11" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-19T16:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010268", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688", "name" : "https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/43113", "name" : "https://www.exploit-db.com/exploits/43113", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ladon since 0.6.1 (since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059) is affected by: XML External Entity (XXE). The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance: https://bitbucket.org/jakobsg/ladon/src/42944fc012a3a48214791c120ee5619434505067/src/ladon/interfaces/soap.py#lines-688. The attack vector is: Send a specially crafted SOAP call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010275", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/helm/helm/pull/3152", "name" : "https://github.com/helm/helm/pull/3152", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50", "name" : "https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/helm/helm/releases/tag/v2.7.2", "name" : "https://github.com/helm/helm/releases/tag/v2.7.2", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm (many files updated, see https://github.com/helm/helm/pull/3152/files/1096813bf9a425e2aa4ac755b6c991b626dfab50). The attack vector is: A malicious client could connect to the server over the network. The fixed version is: 2.7.2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010279", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OISF/suricata/pull/3625", "name" : "https://github.com/OISF/suricata/pull/3625", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b", "name" : "https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://redmine.openinfosecfoundation.org/issues/2770", "name" : "https://redmine.openinfosecfoundation.org/issues/2770", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c (https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b). The attack vector is: An attacker can trigger the vulnerability by a specifically crafted network TCP session. The fixed version is: 4.1.3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010283", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://forge.univention.org/bugzilla/show_bug.cgi?id=48427", "name" : "https://forge.univention.org/bugzilla/show_bug.cgi?id=48427", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/univention/univention-corporate-server/commit/a28053045bd2e778c50ed1acaf4e52e1e34f6e34", "name" : "https://github.com/univention/univention-corporate-server/commit/a28053045bd2e778c50ed1acaf4e52e1e34f6e34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010287", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40", "name" : "https://sourceforge.net/p/tsheetx/code/497/tree/branches/legacy/login.php#l40", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/", "name" : "https://sourceforge.net/p/tsheetx/discussion/779083/thread/7fcb52f696/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via a \"redirect\" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the malicious url." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010290", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cmsmadesimple", "product" : { "product_data" : [ { "product_name" : "bable:multilingual_site", "version" : { "version_data" : [ { "version_value" : "0.4.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-601" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://dev.cmsmadesimple.org/project/files/729", "name" : "http://dev.cmsmadesimple.org/project/files/729", "refsource" : "MISC", "tags" : [ "Product", "Vendor Advisory" ] }, { "url" : "https://untrustednetwork.net/en/2019/02/20/open-redirection-vulnerability-in-babel/", "name" : "https://untrustednetwork.net/en/2019/02/20/open-redirection-vulnerability-in-babel/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Babel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to redirect.php in a \"newurl\" parameter. The component is: redirect.php. The attack vector is: The victim must open a link created by an attacker. Attacker may use any legitimate site using Babel to redirect user to a URL of his/her choosing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cmsmadesimple:bable\\:multilingual_site:*:*:*:*:*:cms_made_simple:*:*", "versionEndIncluding" : "0.4.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-19T19:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010292", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/e3adcf566cb278444830e7badfdcc3983e334fd1", "name" : "https://github.com/OP-TEE/optee_os/commit/e3adcf566cb278444830e7badfdcc3983e334fd1", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory which the TA can access. The component is: optee_os. The fixed version is: v3.4.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-16T14:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010293", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/95f36d661f2b75887772ea28baaad904bde96970", "name" : "https://github.com/OP-TEE/optee_os/commit/95f36d661f2b75887772ea28baaad904bde96970", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010294", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/7e768f8a473409215fe3fff8f6e31f8a3a0103c6", "name" : "https://github.com/OP-TEE/optee_os/commit/7e768f8a473409215fe3fff8f6e31f8a3a0103c6", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from previous Trusted Application. The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010295", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/d5c5b0b77b2b589666024d219a8007b3f5b6faeb", "name" : "https://github.com/OP-TEE/optee_os/commit/d5c5b0b77b2b589666024d219a8007b3f5b6faeb", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory content. The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010296", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/b60e1cee406a1ff521145ab9534370dfb85dd592", "name" : "https://github.com/OP-TEE/optee_os/commit/b60e1cee406a1ff521145ab9534370dfb85dd592", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010297", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/a637243270fc1faae16de059091795c32d86e65e", "name" : "https://github.com/OP-TEE/optee_os/commit/a637243270fc1faae16de059091795c32d86e65e", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010298", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linaro", "product" : { "product_data" : [ { "product_name" : "op-tee", "version" : { "version_data" : [ { "version_value" : "3.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/OP-TEE/optee_os/commit/70697bf3c5dc3d201341b01a1a8e5bc6d2fb48f8", "name" : "https://github.com/OP-TEE/optee_os/commit/70697bf3c5dc3d201341b01a1a8e5bc6d2fb48f8", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). The component is: optee_os. The fixed version is: 3.4.0 and later." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linaro:op-tee:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-16T16:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010299", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rust-lang", "product" : { "product_data" : [ { "product_name" : "rust", "version" : { "version_data" : [ { "version_value" : "1.18.0", "version_affected" : "=" }, { "version_value" : "1.19.0", "version_affected" : "=" }, { "version_value" : "1.20.0", "version_affected" : "=" }, { "version_value" : "1.21.0", "version_affected" : "=" }, { "version_value" : "1.22.0", "version_affected" : "=" }, { "version_value" : "1.22.1", "version_affected" : "=" }, { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.28.0", "version_affected" : "=" }, { "version_value" : "1.29.0", "version_affected" : "=" }, { "version_value" : "1.29.1", "version_affected" : "=" }, { "version_value" : "1.29.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/rust-lang/rust/issues/53566", "name" : "https://github.com/rust-lang/rust/issues/53566", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", "name" : "https://github.com/rust-lang/rust/pull/53571/commits/b85e4cc8fadaabd41da5b9645c08c68b8f89908d", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.18.0", "versionEndExcluding" : "1.30.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-18T19:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10103", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jetbrains", "product" : { "product_data" : [ { "product_name" : "kotlin", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.2.70", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.20", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/", "name" : "https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jetbrains:kotlin:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.3.30" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T20:15Z", "lastModifiedDate" : "2019-07-12T13:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010300", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mz-automation/libiec61850/issues/127", "name" : "https://github.com/mz-automation/libiec61850/issues/127", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: server_example_complex_array. The attack vector is: Send a specific MMS protocol packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-15T18:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010301", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jhead_project", "product" : { "product_data" : [ { "product_name" : "jhead", "version" : { "version_data" : [ { "version_value" : "3.03", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1679952", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1679952", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "jhead 3.03 is affected by: Buffer Overflow. The impact is: Denial of service. The component is: gpsinfo.c Line 151 ProcessGpsInfo(). The attack vector is: Open a specially crafted JPEG file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jhead_project:jhead:3.03:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-17T17:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010302", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jhead_project", "product" : { "product_data" : [ { "product_name" : "jhead", "version" : { "version_data" : [ { "version_value" : "3.03", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1679978", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1679978", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "jhead 3.03 is affected by: Incorrect Access Control. The impact is: Denial of service. The component is: iptc.c Line 122 show_IPTC(). The attack vector is: the victim must open a specially crafted JPEG file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jhead_project:jhead:3.03:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-17T18:05Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010304", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirumee/saleor/issues/3768", "name" : "https://github.com/mirumee/saleor/issues/3768", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop's revenue data. The fixed version is: 2.3.1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T15:15Z", "lastModifiedDate" : "2019-07-15T15:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010305", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d", "name" : "https://github.com/kyz/libmspack/commit/2f084136cfe0d05e5bf5703f3e83c6d955234b4d", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/kyz/libmspack/issues/27", "name" : "https://github.com/kyz/libmspack/issues/27", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/4066-1/", "name" : "USN-4066-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmd_read_headers() in libmspack(file libmspack/mspack/chmd.c). The attack vector is: the victim must open a specially crafted chm file. The fixed version is: after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T15:15Z", "lastModifiedDate" : "2019-07-15T15:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010306", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/stevegraham/slanger/pull/238/commits/5267b455caeb2e055cccf0d2b6a22727c111f5c3", "name" : "https://github.com/stevegraham/slanger/pull/238/commits/5267b455caeb2e055cccf0d2b6a22727c111f5c3", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Slanger 0.6.0 is affected by: Remote Code Execution (RCE). The impact is: A remote attacker can execute arbitrary commands by sending a crafted request to the server. The component is: Message handler & request validator. The attack vector is: Remote unauthenticated. The fixed version is: after commit 5267b455caeb2e055cccf0d2b6a22727c111f5c3." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T15:15Z", "lastModifiedDate" : "2019-07-15T15:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010307", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "glpi-project", "product" : { "product_data" : [ { "product_name" : "glpi", "version" : { "version_data" : [ { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/glpi-project/glpi/blob/9.4/bugfixes/ajax/getDropdownValue.php", "name" : "https://github.com/glpi-project/glpi/blob/9.4/bugfixes/ajax/getDropdownValue.php", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/glpi-project/glpi/releases/tag/9.3.1", "name" : "https://github.com/glpi-project/glpi/releases/tag/9.3.1", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privilege escalation and executing js on admin. The component is: /glpi/ajax/getDropDownValue.php. The attack vector is: 1- User Create a ticket , 2- Admin opens another ticket and click on the \"Link Tickets\" feature, 3- a request to the endpoint fetches js and executes it." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glpi-project:glpi:9.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-18T13:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010308", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/aquaverde/aquarius-core", "name" : "https://github.com/aquaverde/aquarius-core", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0", "name" : "https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-15T18:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010309", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9686. Reason: This candidate is a reservation duplicate of CVE-2019-9686. Notes: All CVE users should reference CVE-2019-9686 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T18:15Z", "lastModifiedDate" : "2019-07-13T01:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010310", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "glpi-project", "product" : { "product_data" : [ { "product_name" : "glpi", "version" : { "version_data" : [ { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/glpi-project/glpi/pull/5519", "name" : "https://github.com/glpi-project/glpi/pull/5519", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/glpi-project/glpi/releases/tag/9.3.1", "name" : "https://github.com/glpi-project/glpi/releases/tag/9.3.1", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder description. The impact is: Admins can phish any user or group of users for credentials / credit cards. The component is: Tools > Reminder > Description .. Set the description to any iframe/form tags and apply. The attack vector is: The attacker puts a login form, the user fills it and clicks on submit .. the request is sent to the attacker domain saving the data. The fixed version is: 9.4.1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glpi-project:glpi:9.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 3.5, "baseSeverity" : "LOW" }, "exploitabilityScore" : 0.9, "impactScore" : 2.5 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-12T18:15Z", "lastModifiedDate" : "2019-07-18T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010311", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11454. Reason: This candidate is a reservation duplicate of CVE-2019-11454. Notes: All CVE users should reference CVE-2019-11454 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T18:15Z", "lastModifiedDate" : "2019-07-13T00:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010312", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11455. Reason: This candidate is a reservation duplicate of CVE-2019-11455. Notes: All CVE users should reference CVE-2019-11455 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T18:15Z", "lastModifiedDate" : "2019-07-13T00:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010314", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gitea", "product" : { "product_data" : [ { "product_name" : "gitea", "version" : { "version_data" : [ { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/go-gitea/gitea/releases", "name" : "https://github.com/go-gitea/gitea/releases", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Gitea 1.7.2, 1.7.3 is affected by: Cross Site Scripting (XSS). The impact is: execute JavaScript in victim's browser, when the vulnerable repo page is loaded. The component is: repository's description. The attack vector is: victim must navigate to public and affected repo page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitea:gitea:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gitea:gitea:1.7.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-12T17:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010315", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wavpack", "product" : { "product_data" : [ { "product_name" : "wavpack", "version" : { "version_data" : [ { "version_value" : "5.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-369" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc", "name" : "https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/dbry/WavPack/issues/65", "name" : "https://github.com/dbry/WavPack/issues/65", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4062-1/", "name" : "USN-4062-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WavPack 5.1 and earlier is affected by: CWE 369: Divide by Zero. The impact is: Divide by zero can lead to sudden crash of a software/service that tries to parse a .wav file. The component is: ParseDsdiffHeaderConfig (dsdiff.c:282). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/4c0faba32fddbd0745cbfaf1e1aeb3da5d35b9fc." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010316", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pyxtrlock_project", "product" : { "product_data" : [ { "product_name" : "pyxtrlock", "version" : { "version_data" : [ { "version_value" : "0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/leonnnn/pyxtrlock/issues/21", "name" : "https://github.com/leonnnn/pyxtrlock/issues/21", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "pyxtrlock 0.3 and earlier is affected by: Incorrect Access Control. The impact is: False locking impression when run in a non-X11 session. The fixed version is: 0.4." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pyxtrlock_project:pyxtrlock:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-14T21:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010317", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wavpack", "product" : { "product_data" : [ { "product_name" : "wavpack", "version" : { "version_data" : [ { "version_value" : "5.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-665" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b", "name" : "https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/dbry/WavPack/issues/66", "name" : "https://github.com/dbry/WavPack/issues/66", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4062-1/", "name" : "USN-4062-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseCaffHeaderConfig (caff.c:486). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/f68a9555b548306c5b1ee45199ccdc4a16a6101b." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010318", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11498. Reason: This candidate is a reservation duplicate of CVE-2019-11498. Notes: All CVE users should reference CVE-2019-11498 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-14T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1010319", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wavpack", "product" : { "product_data" : [ { "product_name" : "wavpack", "version" : { "version_data" : [ { "version_value" : "5.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-665" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe", "name" : "https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/dbry/WavPack/issues/68", "name" : "https://github.com/dbry/WavPack/issues/68", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4062-1/", "name" : "USN-4062-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults. The component is: ParseWave64HeaderConfig (wave64.c:211). The attack vector is: Maliciously crafted .wav file. The fixed version is: After commit https://github.com/dbry/WavPack/commit/33a0025d1d63ccd05d9dbaa6923d52b1446a62fe." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wavpack:wavpack:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10119", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "name" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "name" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via an invalid login attempt to the RemoteApi account, aka HMCCU-154. This leads to automatic login as admin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu3_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.43.16" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu3:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.41.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu2:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-17T16:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10120", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-384" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "name" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "name" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.16, automatic login configuration (aka setAutoLogin) can be achieved by continuing to use a session ID after a logout, aka HMCCU-154." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu3_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.43.16" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu3:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.41.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu2:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-17T16:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10121", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://os-s.de/advisories/OSS-2018-01.pdf", "name" : "https://os-s.de/advisories/OSS-2018-01.pdf", "refsource" : "MISC", "tags" : [ "Broken Link" ] }, { "url" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "name" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "name" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eQ-3 HomeMatic CCU2 devices before 2.41.8 and CCU3 devices before 3.43.15 use session IDs for authentication but lack authorization checks. An attacker can obtain a session ID via the user authentication dialogue, aka HMCCU-153. This leads to automatic login as admin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu3_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.43.15" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu3:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.41.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu2:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-17T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "name" : "https://www.eq-3.de/Downloads/Software/CCU3-Firmware/CCU3-3.43.16/CCU3-Changelog.3.43.16.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "name" : "https://www.eq-3.de/Downloads/Software/HM-CCU2-Firmware_Updates/HM-CCU-2.41.9/HM-CCU2-Changelog.2.41.9.pdf", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "eQ-3 HomeMatic CCU2 devices before 2.41.9 and CCU3 devices before 3.43.16 have buffer overflows in the ReGa ise GmbH HTTP-Server 2.0 component, aka HMCCU-179. This may lead to remote code execution." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu3_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.43.16" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu3:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:eq-3:ccu2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.41.9" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:eq-3:ccu2:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T12:15Z", "lastModifiedDate" : "2019-07-17T16:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10135", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "osbs-client_project", "product" : { "product_data" : [ { "product_name" : "osbs-client", "version" : { "version_data" : [ { "version_value" : "0.46", "version_affected" : "=" }, { "version_value" : "0.46.1", "version_affected" : "=" }, { "version_value" : "0.47", "version_affected" : "=" }, { "version_value" : "0.48", "version_affected" : "=" }, { "version_value" : "0.49", "version_affected" : "=" }, { "version_value" : "0.50", "version_affected" : "=" }, { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.51.1", "version_affected" : "=" }, { "version_value" : "0.52", "version_affected" : "=" }, { "version_value" : "0.53", "version_affected" : "=" }, { "version_value" : "0.53.1", "version_affected" : "=" }, { "version_value" : "0.54", "version_affected" : "=" }, { "version_value" : "0.54.1", "version_affected" : "=" }, { "version_value" : "0.55", "version_affected" : "=" }, { "version_value" : "0.56", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10135", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10135", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking" ] }, { "url" : "https://github.com/containerbuildsystem/osbs-client/pull/865", "name" : "https://github.com/containerbuildsystem/osbs-client/pull/865", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to load any suspicious object for code execution via the parsing of malicious YAML files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:osbs-client_project:osbs-client:*:*:*:*:*:*:*:*", "versionStartIncluding" : "0.46", "versionEndExcluding" : "0.56.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T15:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10183", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "virt-manager", "version" : { "version_data" : [ { "version_value" : "2.2.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109027", "name" : "109027", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10183", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10183", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Virt-install(1) utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced recently in the virt-manager v2.2.0 release." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:virt-manager:2.2.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.3, "baseSeverity" : "LOW" }, "exploitabilityScore" : 1.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T14:15Z", "lastModifiedDate" : "2019-07-12T16:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10190", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "knot-resolver", "product" : { "product_data" : [ { "product_name" : "knot_resolver", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/", "name" : "FEDORA-2019-20f95b0b39", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/", "name" : "FEDORA-2019-fdb50c675d", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html", "name" : "https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knot-resolver:knot_resolver:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.2.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:knot-resolver:knot_resolver:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0.0", "versionEndExcluding" : "4.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-19T03:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10191", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/", "name" : "FEDORA-2019-20f95b0b39", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/", "name" : "FEDORA-2019-fdb50c675d", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html", "name" : "https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-16T18:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10192", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openstack", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "13.0", "version_affected" : "=" }, { "version_value" : "14.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redislabs", "product" : { "product_data" : [ { "product_name" : "redis", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "16.04", "version_affected" : "=" }, { "version_value" : "18.04", "version_affected" : "=" }, { "version_value" : "19.04", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109290", "name" : "109290", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10192", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10192", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/19", "name" : "20190712 [SECURITY] [DSA 4480-1] redis security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4061-1/", "name" : "USN-4061-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4480", "name" : "DSA-4480", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.2.13" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0.0", "versionEndExcluding" : "4.0.14" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0", "versionEndExcluding" : "5.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:13.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:14.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-19T10:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openstack", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "13.0", "version_affected" : "=" }, { "version_value" : "14.0", "version_affected" : "=" } ] } }, { "product_name" : "enterprise_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redislabs", "product" : { "product_data" : [ { "product_name" : "redis", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "16.04", "version_affected" : "=" }, { "version_value" : "18.04", "version_affected" : "=" }, { "version_value" : "19.04", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109290", "name" : "109290", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10193", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/3.2/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/4.0/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES", "name" : "https://raw.githubusercontent.com/antirez/redis/5.0/00-RELEASENOTES", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/19", "name" : "20190712 [SECURITY] [DSA 4480-1] redis security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4061-1/", "name" : "USN-4061-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4480", "name" : "DSA-4480", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperloglog using the SETRANGE command, an attacker could cause Redis to perform controlled increments of up to 12 bytes past the end of a stack-allocated buffer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.2.13" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0.0", "versionEndExcluding" : "4.0.14" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0", "versionEndExcluding" : "5.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:13.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openstack:14.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-19T10:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10194", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ovirt", "product" : { "product_data" : [ { "product_name" : "ovirt", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "virtualization", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-532" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109140", "name" : "109140", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ovirt:ovirt:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:redhat:virtualization:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T15:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10340", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "docker", "version" : { "version_data" : [ { "version_value" : "1.1.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1010", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1010", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A cross-site request forgery vulnerability in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:docker:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.1.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10341", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "docker", "version" : { "version_data" : [ { "version_value" : "1.1.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1010", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1010", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in DockerAPI.DescriptorImpl#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:docker:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.1.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-17T14:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10342", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "docker", "version" : { "version_data" : [ { "version_value" : "1.1.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1400", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1400", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various 'fillCredentialsIdItems' methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:docker:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.1.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-17T19:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10346", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "embeddable_build_status", "version" : { "version_data" : [ { "version_value" : "2.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1419", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1419", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:embeddable_build_status:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "2.0.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T18:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10347", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "mashup_portlets", "version" : { "version_data" : [ { "version_value" : "1.0.9", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-775", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-775", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins Mashup Portlets Plugin stored credentials unencrypted on the Jenkins master where they can be viewed by users with access to the master file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:mashup_portlets:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.0.9" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T18:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10348", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "gogs", "version" : { "version_data" : [ { "version_value" : "1.0.14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1438", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1438", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins Gogs Plugin stored credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:gogs:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.0.14" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T18:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10349", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "dependency_graph_viewer", "version" : { "version_data" : [ { "version_value" : "0.13", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153610/Jenkins-Dependency-Graph-View-0.13-Cross-Site-Scripting.html", "name" : "http://packetstormsecurity.com/files/153610/Jenkins-Dependency-Graph-View-0.13-Cross-Site-Scripting.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1177", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1177", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A stored cross site scripting vulnerability in Jenkins Dependency Graph Viewer Plugin 0.13 and earlier allowed attackers able to configure jobs in Jenkins to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:dependency_graph_viewer:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "0.13" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T18:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10350", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "port_allocator", "version" : { "version_data" : [ { "version_value" : "1.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1441", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1441", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins Port Allocator Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:port_allocator:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "1.8" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T17:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10351", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "caliper_ci", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/11/4", "name" : "[oss-security] 20190711 Multiple vulnerabilities in Jenkins plugins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109156", "name" : "109156", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1437", "name" : "https://jenkins.io/security/advisory/2019-07-11/#SECURITY-1437", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Jenkins Caliper CI Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:caliper_ci:*:*:*:*:*:jenkins:*:*", "versionEndIncluding" : "2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T17:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10352", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/17/2", "name" : "[oss-security] 20190717 Multiple vulnerabilities in Jenkins", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/109299", "name" : "109299", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-1424", "name" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-1424", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-35", "name" : "https://www.tenable.com/security/research/tra-2019-35", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T16:15Z", "lastModifiedDate" : "2019-07-17T16:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10353", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jenkins", "product" : { "product_data" : [ { "product_name" : "jenkins", "version" : { "version_data" : [ { "version_value" : "2.176.1", "version_affected" : "<=" }, { "version_value" : "2.185", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/17/2", "name" : "[oss-security] 20190717 Multiple vulnerabilities in Jenkins", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-626", "name" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-626", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CSRF tokens in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier did not expire, thereby allowing attackers able to obtain them to bypass CSRF protection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "versionEndIncluding" : "2.176.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*", "versionEndIncluding" : "2.185" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T16:15Z", "lastModifiedDate" : "2019-07-19T16:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10354", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/17/2", "name" : "[oss-security] 20190717 Multiple vulnerabilities in Jenkins", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-534", "name" : "https://jenkins.io/security/advisory/2019-07-17/#SECURITY-534", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T16:15Z", "lastModifiedDate" : "2019-07-17T16:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1037", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1037", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1037", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.0, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.0, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T15:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1056", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1056", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1056", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1004, CVE-2019-1059." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1059", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1059", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1059", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1001, CVE-2019-1004, CVE-2019-1056." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1062", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1062", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1062", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1092, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1063", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1063", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1063", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T16:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10638", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" }, { "version_value" : "2.6.32.4", "version_affected" : "=" }, { "version_value" : "2.6.32.5", "version_affected" : "=" }, { "version_value" : "2.6.32.6", "version_affected" : "=" }, { "version_value" : "2.6.32.7", "version_affected" : "=" }, { "version_value" : "2.6.32.8", "version_affected" : "=" }, { "version_value" : "2.6.32.9", "version_affected" : "=" }, { "version_value" : "2.6.32.10", "version_affected" : "=" }, { "version_value" : "2.6.32.11", "version_affected" : "=" }, { "version_value" : "2.6.32.12", "version_affected" : "=" }, { "version_value" : "2.6.32.13", "version_affected" : "=" }, { "version_value" : "2.6.32.14", "version_affected" : "=" }, { "version_value" : "2.6.32.15", "version_affected" : "=" }, { "version_value" : "2.6.32.16", "version_affected" : "=" }, { "version_value" : "2.6.32.17", "version_affected" : "=" }, { "version_value" : "2.6.32.18", "version_affected" : "=" }, { "version_value" : "2.6.32.19", "version_affected" : "=" }, { "version_value" : "2.6.32.20", "version_affected" : "=" }, { "version_value" : "2.6.32.21", "version_affected" : "=" }, { "version_value" : "2.6.32.22", "version_affected" : "=" }, { "version_value" : "2.6.32.23", "version_affected" : "=" }, { "version_value" : "2.6.32.24", "version_affected" : "=" }, { "version_value" : "2.6.32.25", "version_affected" : "=" }, { "version_value" : "2.6.32.26", "version_affected" : "=" }, { "version_value" : "2.6.32.27", "version_affected" : "=" }, { "version_value" : "2.6.32.28", "version_affected" : "=" }, { "version_value" : "2.6.32.29", "version_affected" : "=" }, { "version_value" : "2.6.32.30", "version_affected" : "=" }, { "version_value" : "2.6.32.31", "version_affected" : "=" }, { "version_value" : "2.6.32.32", "version_affected" : "=" }, { "version_value" : "2.6.32.33", "version_affected" : "=" }, { "version_value" : "2.6.32.34", "version_affected" : "=" }, { "version_value" : "2.6.32.35", "version_affected" : "=" }, { "version_value" : "2.6.32.36", "version_affected" : "=" }, { "version_value" : "2.6.32.37", "version_affected" : "=" }, { "version_value" : "2.6.32.38", "version_affected" : "=" }, { "version_value" : "2.6.32.39", "version_affected" : "=" }, { "version_value" : "2.6.32.40", "version_affected" : "=" }, { "version_value" : "2.6.32.41", "version_affected" : "=" }, { "version_value" : "2.6.32.42", "version_affected" : "=" }, { "version_value" : "2.6.32.43", "version_affected" : "=" }, { "version_value" : "2.6.32.44", "version_affected" : "=" }, { "version_value" : "2.6.32.45", "version_affected" : "=" }, { "version_value" : "2.6.32.46", "version_affected" : "=" }, { "version_value" : "2.6.32.47", "version_affected" : "=" }, { "version_value" : "2.6.32.48", "version_affected" : "=" }, { "version_value" : "2.6.32.49", "version_affected" : "=" }, { "version_value" : "2.6.32.50", "version_affected" : "=" }, { "version_value" : "2.6.32.51", "version_affected" : "=" }, { "version_value" : "2.6.32.52", "version_affected" : "=" }, { "version_value" : "2.6.32.53", "version_affected" : "=" }, { "version_value" : "2.6.32.54", "version_affected" : "=" }, { "version_value" : "2.6.32.55", "version_affected" : "=" }, { "version_value" : "2.6.32.56", "version_affected" : "=" }, { "version_value" : "2.6.32.57", "version_affected" : "=" }, { "version_value" : "2.6.32.58", "version_affected" : "=" }, { "version_value" : "2.6.33", "version_affected" : "=" }, { "version_value" : "2.6.33.1", "version_affected" : "=" }, { "version_value" : "2.6.33.2", "version_affected" : "=" }, { "version_value" : "2.6.33.3", "version_affected" : "=" }, { "version_value" : "2.6.33.4", "version_affected" : "=" }, { "version_value" : "2.6.33.5", "version_affected" : "=" }, { "version_value" : "2.6.33.6", "version_affected" : "=" }, { "version_value" : "2.6.33.7", "version_affected" : "=" }, { "version_value" : "2.6.33.8", "version_affected" : "=" }, { "version_value" : "2.6.33.9", "version_affected" : "=" }, { "version_value" : "2.6.33.10", "version_affected" : "=" }, { "version_value" : "2.6.33.11", "version_affected" : "=" }, { "version_value" : "2.6.33.12", "version_affected" : "=" }, { "version_value" : "2.6.33.13", "version_affected" : "=" }, { "version_value" : "2.6.33.14", "version_affected" : "=" }, { "version_value" : "2.6.33.15", "version_affected" : "=" }, { "version_value" : "2.6.33.16", "version_affected" : "=" }, { "version_value" : "2.6.33.17", "version_affected" : "=" }, { "version_value" : "2.6.33.18", "version_affected" : "=" }, { "version_value" : "2.6.33.19", "version_affected" : "=" }, { "version_value" : "2.6.33.20", "version_affected" : "=" }, { "version_value" : "2.6.34", "version_affected" : "=" }, { "version_value" : "2.6.34.1", "version_affected" : "=" }, { "version_value" : "2.6.34.2", "version_affected" : "=" }, { "version_value" : "2.6.34.3", "version_affected" : "=" }, { "version_value" : "2.6.34.4", "version_affected" : "=" }, { "version_value" : "2.6.34.5", "version_affected" : "=" }, { "version_value" : "2.6.34.6", "version_affected" : "=" }, { "version_value" : "2.6.34.7", "version_affected" : "=" }, { "version_value" : "2.6.34.8", "version_affected" : "=" }, { "version_value" : "2.6.34.9", "version_affected" : "=" }, { "version_value" : "2.6.34.10", "version_affected" : "=" }, { "version_value" : "2.6.35", "version_affected" : "=" }, { "version_value" : "2.6.35.1", "version_affected" : "=" }, { "version_value" : "2.6.35.2", "version_affected" : "=" }, { "version_value" : "2.6.35.3", "version_affected" : "=" }, { "version_value" : "2.6.35.4", "version_affected" : "=" }, { "version_value" : "2.6.35.5", "version_affected" : "=" }, { "version_value" : "2.6.35.6", "version_affected" : "=" }, { "version_value" : "2.6.35.7", "version_affected" : "=" }, { "version_value" : "2.6.35.8", "version_affected" : "=" }, { "version_value" : "2.6.35.9", "version_affected" : "=" }, { "version_value" : "2.6.35.10", "version_affected" : "=" }, { "version_value" : "2.6.35.11", "version_affected" : "=" }, { "version_value" : "2.6.35.12", "version_affected" : "=" }, { "version_value" : "2.6.35.13", "version_affected" : "=" }, { "version_value" : "2.6.36", "version_affected" : "=" }, { "version_value" : "2.6.36.1", "version_affected" : "=" }, { "version_value" : "2.6.36.2", "version_affected" : "=" }, { "version_value" : "2.6.36.3", "version_affected" : "=" }, { "version_value" : "2.6.36.4", "version_affected" : "=" }, { "version_value" : "2.6.37", "version_affected" : "=" }, { "version_value" : "2.6.37.1", "version_affected" : "=" }, { "version_value" : "2.6.37.2", "version_affected" : "=" }, { "version_value" : "2.6.37.3", "version_affected" : "=" }, { "version_value" : "2.6.37.4", "version_affected" : "=" }, { "version_value" : "2.6.37.5", "version_affected" : "=" }, { "version_value" : "2.6.37.6", "version_affected" : "=" }, { "version_value" : "2.6.38", "version_affected" : "=" }, { "version_value" : "2.6.38.1", "version_affected" : "=" }, { "version_value" : "2.6.38.2", "version_affected" : "=" }, { "version_value" : "2.6.38.3", "version_affected" : "=" }, { "version_value" : "2.6.38.4", "version_affected" : "=" }, { "version_value" : "2.6.38.5", "version_affected" : "=" }, { "version_value" : "2.6.38.6", "version_affected" : "=" }, { "version_value" : "2.6.38.7", "version_affected" : "=" }, { "version_value" : "2.6.38.8", "version_affected" : "=" }, { "version_value" : "2.6.39", "version_affected" : "=" }, { "version_value" : "2.6.39.1", "version_affected" : "=" }, { "version_value" : "2.6.39.2", "version_affected" : "=" }, { "version_value" : "2.6.39.3", "version_affected" : "=" }, { "version_value" : "2.6.39.4", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.0.18", "version_affected" : "=" }, { "version_value" : "3.0.19", "version_affected" : "=" }, { "version_value" : "3.0.20", "version_affected" : "=" }, { "version_value" : "3.0.21", "version_affected" : "=" }, { "version_value" : "3.0.22", "version_affected" : "=" }, { "version_value" : "3.0.23", "version_affected" : "=" }, { "version_value" : "3.0.24", "version_affected" : "=" }, { "version_value" : "3.0.25", "version_affected" : "=" }, { "version_value" : "3.0.26", "version_affected" : "=" }, { "version_value" : "3.0.27", "version_affected" : "=" }, { "version_value" : "3.0.28", "version_affected" : "=" }, { "version_value" : "3.0.29", "version_affected" : "=" }, { "version_value" : "3.0.30", "version_affected" : "=" }, { "version_value" : "3.0.31", "version_affected" : "=" }, { "version_value" : "3.0.32", "version_affected" : "=" }, { "version_value" : "3.0.33", "version_affected" : "=" }, { "version_value" : "3.0.34", "version_affected" : "=" }, { "version_value" : "3.0.35", "version_affected" : "=" }, { "version_value" : "3.0.36", "version_affected" : "=" }, { "version_value" : "3.0.37", "version_affected" : "=" }, { "version_value" : "3.0.38", "version_affected" : "=" }, { "version_value" : "3.0.39", "version_affected" : "=" }, { "version_value" : "3.0.40", "version_affected" : "=" }, { "version_value" : "3.0.41", "version_affected" : "=" }, { "version_value" : "3.0.42", "version_affected" : "=" }, { "version_value" : "3.0.43", "version_affected" : "=" }, { "version_value" : "3.0.44", "version_affected" : "=" }, { "version_value" : "3.0.45", "version_affected" : "=" }, { "version_value" : "3.0.46", "version_affected" : "=" }, { "version_value" : "3.0.47", "version_affected" : "=" }, { "version_value" : "3.0.48", "version_affected" : "=" }, { "version_value" : "3.0.49", "version_affected" : "=" }, { "version_value" : "3.0.50", "version_affected" : "=" }, { "version_value" : "3.0.51", "version_affected" : "=" }, { "version_value" : "3.0.52", "version_affected" : "=" }, { "version_value" : "3.0.53", "version_affected" : "=" }, { "version_value" : "3.0.54", "version_affected" : "=" }, { "version_value" : "3.0.55", "version_affected" : "=" }, { "version_value" : "3.0.56", "version_affected" : "=" }, { "version_value" : "3.0.57", "version_affected" : "=" }, { "version_value" : "3.0.58", "version_affected" : "=" }, { "version_value" : "3.0.59", "version_affected" : "=" }, { "version_value" : "3.0.60", "version_affected" : "=" }, { "version_value" : "3.0.61", "version_affected" : "=" }, { "version_value" : "3.0.62", "version_affected" : "=" }, { "version_value" : "3.0.63", "version_affected" : "=" }, { "version_value" : "3.0.64", "version_affected" : "=" }, { "version_value" : "3.0.65", "version_affected" : "=" }, { "version_value" : "3.0.66", "version_affected" : "=" }, { "version_value" : "3.0.67", "version_affected" : "=" }, { "version_value" : "3.0.68", "version_affected" : "=" }, { "version_value" : "3.0.69", "version_affected" : "=" }, { "version_value" : "3.0.70", "version_affected" : "=" }, { "version_value" : "3.0.71", "version_affected" : "=" }, { "version_value" : "3.0.72", "version_affected" : "=" }, { "version_value" : "3.0.73", "version_affected" : "=" }, { "version_value" : "3.0.74", "version_affected" : "=" }, { "version_value" : "3.0.75", "version_affected" : "=" }, { "version_value" : "3.0.76", "version_affected" : "=" }, { "version_value" : "3.0.77", "version_affected" : "=" }, { "version_value" : "3.0.78", "version_affected" : "=" }, { "version_value" : "3.0.79", "version_affected" : "=" }, { "version_value" : "3.0.80", "version_affected" : "=" }, { "version_value" : "3.0.81", "version_affected" : "=" }, { "version_value" : "3.0.82", "version_affected" : "=" }, { "version_value" : "3.0.83", "version_affected" : "=" }, { "version_value" : "3.0.84", "version_affected" : "=" }, { "version_value" : "3.0.85", "version_affected" : "=" }, { "version_value" : "3.0.86", "version_affected" : "=" }, { "version_value" : "3.0.87", "version_affected" : "=" }, { "version_value" : "3.0.88", "version_affected" : "=" }, { "version_value" : "3.0.89", "version_affected" : "=" }, { "version_value" : "3.0.90", "version_affected" : "=" }, { "version_value" : "3.0.91", "version_affected" : "=" }, { "version_value" : "3.0.92", "version_affected" : "=" }, { "version_value" : "3.0.93", "version_affected" : "=" }, { "version_value" : "3.0.94", "version_affected" : "=" }, { "version_value" : "3.0.95", "version_affected" : "=" }, { "version_value" : "3.0.96", "version_affected" : "=" }, { "version_value" : "3.0.97", "version_affected" : "=" }, { "version_value" : "3.0.98", "version_affected" : "=" }, { "version_value" : "3.0.99", "version_affected" : "=" }, { "version_value" : "3.0.100", "version_affected" : "=" }, { "version_value" : "3.0.101", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.2.15", "version_affected" : "=" }, { "version_value" : "3.2.16", "version_affected" : "=" }, { "version_value" : "3.2.17", "version_affected" : "=" }, { "version_value" : "3.2.18", "version_affected" : "=" }, { "version_value" : "3.2.19", "version_affected" : "=" }, { "version_value" : "3.2.20", "version_affected" : "=" }, { "version_value" : "3.2.21", "version_affected" : "=" }, { "version_value" : "3.2.22", "version_affected" : "=" }, { "version_value" : "3.2.23", "version_affected" : "=" }, { "version_value" : "3.2.24", "version_affected" : "=" }, { "version_value" : "3.2.25", "version_affected" : "=" }, { "version_value" : "3.2.26", "version_affected" : "=" }, { "version_value" : "3.2.27", "version_affected" : "=" }, { "version_value" : "3.2.28", "version_affected" : "=" }, { "version_value" : "3.2.29", "version_affected" : "=" }, { "version_value" : "3.2.30", "version_affected" : "=" }, { "version_value" : "3.2.64", "version_affected" : "=" }, { "version_value" : "3.2.65", "version_affected" : "=" }, { "version_value" : "3.2.66", "version_affected" : "=" }, { "version_value" : "3.2.67", "version_affected" : "=" }, { "version_value" : "3.2.68", "version_affected" : "=" }, { "version_value" : "3.2.69", "version_affected" : "=" }, { "version_value" : "3.2.70", "version_affected" : "=" }, { "version_value" : "3.2.71", "version_affected" : "=" }, { "version_value" : "3.2.72", "version_affected" : "=" }, { "version_value" : "3.2.73", "version_affected" : "=" }, { "version_value" : "3.2.74", "version_affected" : "=" }, { "version_value" : "3.2.75", "version_affected" : "=" }, { "version_value" : "3.2.76", "version_affected" : "=" }, { "version_value" : "3.2.77", "version_affected" : "=" }, { "version_value" : "3.2.78", "version_affected" : "=" }, { "version_value" : "3.2.79", "version_affected" : "=" }, { "version_value" : "3.2.80", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.4.15", "version_affected" : "=" }, { "version_value" : "3.4.16", "version_affected" : "=" }, { "version_value" : "3.4.17", "version_affected" : "=" }, { "version_value" : "3.4.18", "version_affected" : "=" }, { "version_value" : "3.4.19", "version_affected" : "=" }, { "version_value" : "3.4.20", "version_affected" : "=" }, { "version_value" : "3.4.21", "version_affected" : "=" }, { "version_value" : "3.4.22", "version_affected" : "=" }, { "version_value" : "3.4.23", "version_affected" : "=" }, { "version_value" : "3.4.24", "version_affected" : "=" }, { "version_value" : "3.4.25", "version_affected" : "=" }, { "version_value" : "3.4.26", "version_affected" : "=" }, { "version_value" : "3.4.27", "version_affected" : "=" }, { "version_value" : "3.4.28", "version_affected" : "=" }, { "version_value" : "3.4.29", "version_affected" : "=" }, { "version_value" : "3.4.30", "version_affected" : "=" }, { "version_value" : "3.4.31", "version_affected" : "=" }, { "version_value" : "3.4.32", "version_affected" : "=" }, { "version_value" : "3.4.33", "version_affected" : "=" }, { "version_value" : "3.4.34", "version_affected" : "=" }, { "version_value" : "3.4.35", "version_affected" : "=" }, { "version_value" : "3.4.36", "version_affected" : "=" }, { "version_value" : "3.4.37", "version_affected" : "=" }, { "version_value" : "3.4.38", "version_affected" : "=" }, { "version_value" : "3.4.39", "version_affected" : "=" }, { "version_value" : "3.4.40", "version_affected" : "=" }, { "version_value" : "3.4.41", "version_affected" : "=" }, { "version_value" : "3.4.42", "version_affected" : "=" }, { "version_value" : "3.4.43", "version_affected" : "=" }, { "version_value" : "3.4.44", "version_affected" : "=" }, { "version_value" : "3.4.45", "version_affected" : "=" }, { "version_value" : "3.4.46", "version_affected" : "=" }, { "version_value" : "3.4.47", "version_affected" : "=" }, { "version_value" : "3.4.48", "version_affected" : "=" }, { "version_value" : "3.4.49", "version_affected" : "=" }, { "version_value" : "3.4.50", "version_affected" : "=" }, { "version_value" : "3.4.51", "version_affected" : "=" }, { "version_value" : "3.4.52", "version_affected" : "=" }, { "version_value" : "3.4.53", "version_affected" : "=" }, { "version_value" : "3.4.54", "version_affected" : "=" }, { "version_value" : "3.4.55", "version_affected" : "=" }, { "version_value" : "3.4.56", "version_affected" : "=" }, { "version_value" : "3.4.57", "version_affected" : "=" }, { "version_value" : "3.4.58", "version_affected" : "=" }, { "version_value" : "3.4.59", "version_affected" : "=" }, { "version_value" : "3.4.60", "version_affected" : "=" }, { "version_value" : "3.4.61", "version_affected" : "=" }, { "version_value" : "3.4.62", "version_affected" : "=" }, { "version_value" : "3.4.63", "version_affected" : "=" }, { "version_value" : "3.4.64", "version_affected" : "=" }, { "version_value" : "3.4.65", "version_affected" : "=" }, { "version_value" : "3.4.66", "version_affected" : "=" }, { "version_value" : "3.4.67", "version_affected" : "=" }, { "version_value" : "3.4.68", "version_affected" : "=" }, { "version_value" : "3.4.69", "version_affected" : "=" }, { "version_value" : "3.4.70", "version_affected" : "=" }, { "version_value" : "3.4.71", "version_affected" : "=" }, { "version_value" : "3.4.72", "version_affected" : "=" }, { "version_value" : "3.4.73", "version_affected" : "=" }, { "version_value" : "3.4.74", "version_affected" : "=" }, { "version_value" : "3.4.75", "version_affected" : "=" }, { "version_value" : "3.4.76", "version_affected" : "=" }, { "version_value" : "3.4.77", "version_affected" : "=" }, { "version_value" : "3.4.78", "version_affected" : "=" }, { "version_value" : "3.4.79", "version_affected" : "=" }, { "version_value" : "3.4.80", "version_affected" : "=" }, { "version_value" : "3.4.81", "version_affected" : "=" }, { "version_value" : "3.4.82", "version_affected" : "=" }, { "version_value" : "3.4.83", "version_affected" : "=" }, { "version_value" : "3.4.84", "version_affected" : "=" }, { "version_value" : "3.4.85", "version_affected" : "=" }, { "version_value" : "3.4.86", "version_affected" : "=" }, { "version_value" : "3.4.87", "version_affected" : "=" }, { "version_value" : "3.4.88", "version_affected" : "=" }, { "version_value" : "3.4.89", "version_affected" : "=" }, { "version_value" : "3.4.90", "version_affected" : "=" }, { "version_value" : "3.4.91", "version_affected" : "=" }, { "version_value" : "3.4.92", "version_affected" : "=" }, { "version_value" : "3.4.93", "version_affected" : "=" }, { "version_value" : "3.4.94", "version_affected" : "=" }, { "version_value" : "3.4.95", "version_affected" : "=" }, { "version_value" : "3.4.96", "version_affected" : "=" }, { "version_value" : "3.4.97", "version_affected" : "=" }, { "version_value" : "3.4.98", "version_affected" : "=" }, { "version_value" : "3.4.99", "version_affected" : "=" }, { "version_value" : "3.4.100", "version_affected" : "=" }, { "version_value" : "3.4.101", "version_affected" : "=" }, { "version_value" : "3.4.102", "version_affected" : "=" }, { "version_value" : "3.4.103", "version_affected" : "=" }, { "version_value" : "3.4.104", "version_affected" : "=" }, { "version_value" : "3.4.105", "version_affected" : "=" }, { "version_value" : "3.4.106", "version_affected" : "=" }, { "version_value" : "3.4.107", "version_affected" : "=" }, { "version_value" : "3.4.108", "version_affected" : "=" }, { "version_value" : "3.4.109", "version_affected" : "=" }, { "version_value" : "3.4.110", "version_affected" : "=" }, { "version_value" : "3.4.111", "version_affected" : "=" }, { "version_value" : "3.4.112", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.6.3", "version_affected" : "=" }, { "version_value" : "3.6.4", "version_affected" : "=" }, { "version_value" : "3.6.5", "version_affected" : "=" }, { "version_value" : "3.6.6", "version_affected" : "=" }, { "version_value" : "3.6.7", "version_affected" : "=" }, { "version_value" : "3.6.8", "version_affected" : "=" }, { "version_value" : "3.6.9", "version_affected" : "=" }, { "version_value" : "3.6.10", "version_affected" : "=" }, { "version_value" : "3.6.11", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.3", "version_affected" : "=" }, { "version_value" : "3.7.4", "version_affected" : "=" }, { "version_value" : "3.7.5", "version_affected" : "=" }, { "version_value" : "3.7.6", "version_affected" : "=" }, { "version_value" : "3.7.7", "version_affected" : "=" }, { "version_value" : "3.7.8", "version_affected" : "=" }, { "version_value" : "3.7.9", "version_affected" : "=" }, { "version_value" : "3.7.10", "version_affected" : "=" }, { "version_value" : "3.8", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.8.1", "version_affected" : "=" }, { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.8.5", "version_affected" : "=" }, { "version_value" : "3.8.6", "version_affected" : "=" }, { "version_value" : "3.8.7", "version_affected" : "=" }, { "version_value" : "3.8.8", "version_affected" : "=" }, { "version_value" : "3.8.9", "version_affected" : "=" }, { "version_value" : "3.8.10", "version_affected" : "=" }, { "version_value" : "3.8.11", "version_affected" : "=" }, { "version_value" : "3.8.12", "version_affected" : "=" }, { "version_value" : "3.8.13", "version_affected" : "=" }, { "version_value" : "3.9", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.9.2", "version_affected" : "=" }, { "version_value" : "3.9.3", "version_affected" : "=" }, { "version_value" : "3.9.4", "version_affected" : "=" }, { "version_value" : "3.9.5", "version_affected" : "=" }, { "version_value" : "3.9.6", "version_affected" : "=" }, { "version_value" : "3.9.7", "version_affected" : "=" }, { "version_value" : "3.9.8", "version_affected" : "=" }, { "version_value" : "3.9.9", "version_affected" : "=" }, { "version_value" : "3.9.10", "version_affected" : "=" }, { "version_value" : "3.9.11", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10.0", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.3", "version_affected" : "=" }, { "version_value" : "3.10.4", "version_affected" : "=" }, { "version_value" : "3.10.5", "version_affected" : "=" }, { "version_value" : "3.10.6", "version_affected" : "=" }, { "version_value" : "3.10.7", "version_affected" : "=" }, { "version_value" : "3.10.8", "version_affected" : "=" }, { "version_value" : "3.10.9", "version_affected" : "=" }, { "version_value" : "3.10.10", "version_affected" : "=" }, { "version_value" : "3.10.11", "version_affected" : "=" }, { "version_value" : "3.10.12", "version_affected" : "=" }, { "version_value" : "3.10.13", "version_affected" : "=" }, { "version_value" : "3.10.14", "version_affected" : "=" }, { "version_value" : "3.10.15", "version_affected" : "=" }, { "version_value" : "3.10.16", "version_affected" : "=" }, { "version_value" : "3.10.17", "version_affected" : "=" }, { "version_value" : "3.10.18", "version_affected" : "=" }, { "version_value" : "3.10.19", "version_affected" : "=" }, { "version_value" : "3.10.20", "version_affected" : "=" }, { "version_value" : "3.10.21", "version_affected" : "=" }, { "version_value" : "3.10.22", "version_affected" : "=" }, { "version_value" : "3.10.23", "version_affected" : "=" }, { "version_value" : "3.10.24", "version_affected" : "=" }, { "version_value" : "3.10.25", "version_affected" : "=" }, { "version_value" : "3.10.26", "version_affected" : "=" }, { "version_value" : "3.10.27", "version_affected" : "=" }, { "version_value" : "3.10.28", "version_affected" : "=" }, { "version_value" : "3.10.29", "version_affected" : "=" }, { "version_value" : "3.10.30", "version_affected" : "=" }, { "version_value" : "3.10.31", "version_affected" : "=" }, { "version_value" : "3.10.32", "version_affected" : "=" }, { "version_value" : "3.10.33", "version_affected" : "=" }, { "version_value" : "3.10.34", "version_affected" : "=" }, { "version_value" : "3.10.35", "version_affected" : "=" }, { "version_value" : "3.10.36", "version_affected" : "=" }, { "version_value" : "3.10.37", "version_affected" : "=" }, { "version_value" : "3.10.38", "version_affected" : "=" }, { "version_value" : "3.10.39", "version_affected" : "=" }, { "version_value" : "3.10.40", "version_affected" : "=" }, { "version_value" : "3.10.41", "version_affected" : "=" }, { "version_value" : "3.10.42", "version_affected" : "=" }, { "version_value" : "3.10.43", "version_affected" : "=" }, { "version_value" : "3.10.44", "version_affected" : "=" }, { "version_value" : "3.10.45", "version_affected" : "=" }, { "version_value" : "3.10.46", "version_affected" : "=" }, { "version_value" : "3.10.47", "version_affected" : "=" }, { "version_value" : "3.10.48", "version_affected" : "=" }, { "version_value" : "3.10.49", "version_affected" : "=" }, { "version_value" : "3.10.50", "version_affected" : "=" }, { "version_value" : "3.10.51", "version_affected" : "=" }, { "version_value" : "3.10.52", "version_affected" : "=" }, { "version_value" : "3.10.53", "version_affected" : "=" }, { "version_value" : "3.10.54", "version_affected" : "=" }, { "version_value" : "3.10.55", "version_affected" : "=" }, { "version_value" : "3.10.56", "version_affected" : "=" }, { "version_value" : "3.10.57", "version_affected" : "=" }, { "version_value" : "3.10.58", "version_affected" : "=" }, { "version_value" : "3.10.59", "version_affected" : "=" }, { "version_value" : "3.10.60", "version_affected" : "=" }, { "version_value" : "3.10.61", "version_affected" : "=" }, { "version_value" : "3.10.62", "version_affected" : "=" }, { "version_value" : "3.10.63", "version_affected" : "=" }, { "version_value" : "3.10.64", "version_affected" : "=" }, { "version_value" : "3.10.65", "version_affected" : "=" }, { "version_value" : "3.10.66", "version_affected" : "=" }, { "version_value" : "3.10.67", "version_affected" : "=" }, { "version_value" : "3.10.68", "version_affected" : "=" }, { "version_value" : "3.10.69", "version_affected" : "=" }, { "version_value" : "3.10.70", "version_affected" : "=" }, { "version_value" : "3.10.71", "version_affected" : "=" }, { "version_value" : "3.10.72", "version_affected" : "=" }, { "version_value" : "3.10.73", "version_affected" : "=" }, { "version_value" : "3.10.74", "version_affected" : "=" }, { "version_value" : "3.10.75", "version_affected" : "=" }, { "version_value" : "3.10.76", "version_affected" : "=" }, { "version_value" : "3.10.77", "version_affected" : "=" }, { "version_value" : "3.10.78", "version_affected" : "=" }, { "version_value" : "3.10.79", "version_affected" : "=" }, { "version_value" : "3.10.80", "version_affected" : "=" }, { "version_value" : "3.10.81", "version_affected" : "=" }, { "version_value" : "3.10.82", "version_affected" : "=" }, { "version_value" : "3.10.83", "version_affected" : "=" }, { "version_value" : "3.10.84", "version_affected" : "=" }, { "version_value" : "3.10.85", "version_affected" : "=" }, { "version_value" : "3.10.86", "version_affected" : "=" }, { "version_value" : "3.10.87", "version_affected" : "=" }, { "version_value" : "3.10.88", "version_affected" : "=" }, { "version_value" : "3.10.89", "version_affected" : "=" }, { "version_value" : "3.10.90", "version_affected" : "=" }, { "version_value" : "3.10.91", "version_affected" : "=" }, { "version_value" : "3.10.92", "version_affected" : "=" }, { "version_value" : "3.10.93", "version_affected" : "=" }, { "version_value" : "3.10.94", "version_affected" : "=" }, { "version_value" : "3.10.95", "version_affected" : "=" }, { "version_value" : "3.10.96", "version_affected" : "=" }, { "version_value" : "3.10.97", "version_affected" : "=" }, { "version_value" : "3.10.98", "version_affected" : "=" }, { "version_value" : "3.10.99", "version_affected" : "=" }, { "version_value" : "3.10.100", "version_affected" : "=" }, { "version_value" : "3.10.101", "version_affected" : "=" }, { "version_value" : "3.10.102", "version_affected" : "=" }, { "version_value" : "3.11", "version_affected" : "=" }, { "version_value" : "3.11.1", "version_affected" : "=" }, { "version_value" : "3.11.2", "version_affected" : "=" }, { "version_value" : "3.11.3", "version_affected" : "=" }, { "version_value" : "3.11.4", "version_affected" : "=" }, { "version_value" : "3.11.5", "version_affected" : "=" }, { "version_value" : "3.11.6", "version_affected" : "=" }, { "version_value" : "3.11.7", "version_affected" : "=" }, { "version_value" : "3.11.8", "version_affected" : "=" }, { "version_value" : "3.11.9", "version_affected" : "=" }, { "version_value" : "3.11.10", "version_affected" : "=" }, { "version_value" : "3.12", "version_affected" : "=" }, { "version_value" : "3.12.1", "version_affected" : "=" }, { "version_value" : "3.12.2", "version_affected" : "=" }, { "version_value" : "3.12.3", "version_affected" : "=" }, { "version_value" : "3.12.4", "version_affected" : "=" }, { "version_value" : "3.12.5", "version_affected" : "=" }, { "version_value" : "3.12.6", "version_affected" : "=" }, { "version_value" : "3.12.7", "version_affected" : "=" }, { "version_value" : "3.12.8", "version_affected" : "=" }, { "version_value" : "3.12.9", "version_affected" : "=" }, { "version_value" : "3.12.10", "version_affected" : "=" }, { "version_value" : "3.12.11", "version_affected" : "=" }, { "version_value" : "3.12.12", "version_affected" : "=" }, { "version_value" : "3.12.13", "version_affected" : "=" }, { "version_value" : "3.12.14", "version_affected" : "=" }, { "version_value" : "3.12.15", "version_affected" : "=" }, { "version_value" : "3.12.16", "version_affected" : "=" }, { "version_value" : "3.12.17", "version_affected" : "=" }, { "version_value" : "3.12.18", "version_affected" : "=" }, { "version_value" : "3.12.19", "version_affected" : "=" }, { "version_value" : "3.12.20", "version_affected" : "=" }, { "version_value" : "3.12.21", "version_affected" : "=" }, { "version_value" : "3.12.22", "version_affected" : "=" }, { "version_value" : "3.12.23", "version_affected" : "=" }, { "version_value" : "3.12.24", "version_affected" : "=" }, { "version_value" : "3.12.25", "version_affected" : "=" }, { "version_value" : "3.12.26", "version_affected" : "=" }, { "version_value" : "3.12.27", "version_affected" : "=" }, { "version_value" : "3.12.28", "version_affected" : "=" }, { "version_value" : "3.12.29", "version_affected" : "=" }, { "version_value" : "3.12.30", "version_affected" : "=" }, { "version_value" : "3.12.31", "version_affected" : "=" }, { "version_value" : "3.12.32", "version_affected" : "=" }, { "version_value" : "3.12.33", "version_affected" : "=" }, { "version_value" : "3.12.34", "version_affected" : "=" }, { "version_value" : "3.12.35", "version_affected" : "=" }, { "version_value" : "3.12.36", "version_affected" : "=" }, { "version_value" : "3.12.37", "version_affected" : "=" }, { "version_value" : "3.12.38", "version_affected" : "=" }, { "version_value" : "3.12.39", "version_affected" : "=" }, { "version_value" : "3.12.40", "version_affected" : "=" }, { "version_value" : "3.12.41", "version_affected" : "=" }, { "version_value" : "3.12.42", "version_affected" : "=" }, { "version_value" : "3.12.43", "version_affected" : "=" }, { "version_value" : "3.12.44", "version_affected" : "=" }, { "version_value" : "3.12.45", "version_affected" : "=" }, { "version_value" : "3.12.46", "version_affected" : "=" }, { "version_value" : "3.12.47", "version_affected" : "=" }, { "version_value" : "3.12.48", "version_affected" : "=" }, { "version_value" : "3.12.49", "version_affected" : "=" }, { "version_value" : "3.12.50", "version_affected" : "=" }, { "version_value" : "3.12.51", "version_affected" : "=" }, { "version_value" : "3.12.52", "version_affected" : "=" }, { "version_value" : "3.12.53", "version_affected" : "=" }, { "version_value" : "3.12.54", "version_affected" : "=" }, { "version_value" : "3.12.55", "version_affected" : "=" }, { "version_value" : "3.12.56", "version_affected" : "=" }, { "version_value" : "3.12.57", "version_affected" : "=" }, { "version_value" : "3.12.58", "version_affected" : "=" }, { "version_value" : "3.12.59", "version_affected" : "=" }, { "version_value" : "3.13", "version_affected" : "=" }, { "version_value" : "3.13.1", "version_affected" : "=" }, { "version_value" : "3.13.2", "version_affected" : "=" }, { "version_value" : "3.13.3", "version_affected" : "=" }, { "version_value" : "3.13.4", "version_affected" : "=" }, { "version_value" : "3.13.5", "version_affected" : "=" }, { "version_value" : "3.13.6", "version_affected" : "=" }, { "version_value" : "3.13.7", "version_affected" : "=" }, { "version_value" : "3.13.8", "version_affected" : "=" }, { "version_value" : "3.13.9", "version_affected" : "=" }, { "version_value" : "3.13.10", "version_affected" : "=" }, { "version_value" : "3.13.11", "version_affected" : "=" }, { "version_value" : "3.14", "version_affected" : "=" }, { "version_value" : "3.14.1", "version_affected" : "=" }, { "version_value" : "3.14.2", "version_affected" : "=" }, { "version_value" : "3.14.3", "version_affected" : "=" }, { "version_value" : "3.14.4", "version_affected" : "=" }, { "version_value" : "3.14.5", "version_affected" : "=" }, { "version_value" : "3.14.8", "version_affected" : "=" }, { "version_value" : "3.14.10", "version_affected" : "=" }, { "version_value" : "3.14.11", "version_affected" : "=" }, { "version_value" : "3.14.12", "version_affected" : "=" }, { "version_value" : "3.14.13", "version_affected" : "=" }, { "version_value" : "3.14.14", "version_affected" : "=" }, { "version_value" : "3.14.15", "version_affected" : "=" }, { "version_value" : "3.14.16", "version_affected" : "=" }, { "version_value" : "3.14.17", "version_affected" : "=" }, { "version_value" : "3.14.18", "version_affected" : "=" }, { "version_value" : "3.14.19", "version_affected" : "=" }, { "version_value" : "3.14.20", "version_affected" : "=" }, { "version_value" : "3.14.21", "version_affected" : "=" }, { "version_value" : "3.14.22", "version_affected" : "=" }, { "version_value" : "3.14.23", "version_affected" : "=" }, { "version_value" : "3.14.24", "version_affected" : "=" }, { "version_value" : "3.14.25", "version_affected" : "=" }, { "version_value" : "3.14.26", "version_affected" : "=" }, { "version_value" : "3.14.27", "version_affected" : "=" }, { "version_value" : "3.14.28", "version_affected" : "=" }, { "version_value" : "3.14.29", "version_affected" : "=" }, { "version_value" : "3.14.30", "version_affected" : "=" }, { "version_value" : "3.14.31", "version_affected" : "=" }, { "version_value" : "3.14.32", "version_affected" : "=" }, { "version_value" : "3.14.33", "version_affected" : "=" }, { "version_value" : "3.14.34", "version_affected" : "=" }, { "version_value" : "3.14.35", "version_affected" : "=" }, { "version_value" : "3.14.36", "version_affected" : "=" }, { "version_value" : "3.14.37", "version_affected" : "=" }, { "version_value" : "3.14.38", "version_affected" : "=" }, { "version_value" : "3.14.39", "version_affected" : "=" }, { "version_value" : "3.14.40", "version_affected" : "=" }, { "version_value" : "3.14.41", "version_affected" : "=" }, { "version_value" : "3.14.42", "version_affected" : "=" }, { "version_value" : "3.14.43", "version_affected" : "=" }, { "version_value" : "3.14.44", "version_affected" : "=" }, { "version_value" : "3.14.45", "version_affected" : "=" }, { "version_value" : "3.14.46", "version_affected" : "=" }, { "version_value" : "3.14.47", "version_affected" : "=" }, { "version_value" : "3.14.48", "version_affected" : "=" }, { "version_value" : "3.14.49", "version_affected" : "=" }, { "version_value" : "3.14.50", "version_affected" : "=" }, { "version_value" : "3.14.51", "version_affected" : "=" }, { "version_value" : "3.14.52", "version_affected" : "=" }, { "version_value" : "3.14.53", "version_affected" : "=" }, { "version_value" : "3.14.54", "version_affected" : "=" }, { "version_value" : "3.14.55", "version_affected" : "=" }, { "version_value" : "3.14.56", "version_affected" : "=" }, { "version_value" : "3.14.57", "version_affected" : "=" }, { "version_value" : "3.14.58", "version_affected" : "=" }, { "version_value" : "3.14.59", "version_affected" : "=" }, { "version_value" : "3.14.60", "version_affected" : "=" }, { "version_value" : "3.14.61", "version_affected" : "=" }, { "version_value" : "3.14.62", "version_affected" : "=" }, { "version_value" : "3.14.63", "version_affected" : "=" }, { "version_value" : "3.14.64", "version_affected" : "=" }, { "version_value" : "3.14.65", "version_affected" : "=" }, { "version_value" : "3.14.66", "version_affected" : "=" }, { "version_value" : "3.14.67", "version_affected" : "=" }, { "version_value" : "3.14.68", "version_affected" : "=" }, { "version_value" : "3.14.79", "version_affected" : "=" }, { "version_value" : "3.15", "version_affected" : "=" }, { "version_value" : "3.15.1", "version_affected" : "=" }, { "version_value" : "3.15.2", "version_affected" : "=" }, { "version_value" : "3.15.3", "version_affected" : "=" }, { "version_value" : "3.15.4", "version_affected" : "=" }, { "version_value" : "3.15.5", "version_affected" : "=" }, { "version_value" : "3.15.6", "version_affected" : "=" }, { "version_value" : "3.15.7", "version_affected" : "=" }, { "version_value" : "3.15.8", "version_affected" : "=" }, { "version_value" : "3.15.10", "version_affected" : "=" }, { "version_value" : "3.16", "version_affected" : "=" }, { "version_value" : "3.16.0", "version_affected" : "=" }, { "version_value" : "3.16.1", "version_affected" : "=" }, { "version_value" : "3.16.4", "version_affected" : "=" }, { "version_value" : "3.16.5", "version_affected" : "=" }, { "version_value" : "3.16.6", "version_affected" : "=" }, { "version_value" : "3.16.7", "version_affected" : "=" }, { "version_value" : "3.17", "version_affected" : "=" }, { "version_value" : "3.17.3", "version_affected" : "=" }, { "version_value" : "3.17.5", "version_affected" : "=" }, { "version_value" : "3.17.6", "version_affected" : "=" }, { "version_value" : "3.17.7", "version_affected" : "=" }, { "version_value" : "3.17.8", "version_affected" : "=" }, { "version_value" : "3.18", "version_affected" : "=" }, { "version_value" : "3.18.0", "version_affected" : "=" }, { "version_value" : "3.18.1", "version_affected" : "=" }, { "version_value" : "3.18.2", "version_affected" : "=" }, { "version_value" : "3.18.3", "version_affected" : "=" }, { "version_value" : "3.18.4", "version_affected" : "=" }, { "version_value" : "3.18.5", "version_affected" : "=" }, { "version_value" : "3.18.6", "version_affected" : "=" }, { "version_value" : "3.18.7", "version_affected" : "=" }, { "version_value" : "3.18.8", "version_affected" : "=" }, { "version_value" : "3.18.10", "version_affected" : "=" }, { "version_value" : "3.18.11", "version_affected" : "=" }, { "version_value" : "3.18.12", "version_affected" : "=" }, { "version_value" : "3.18.13", "version_affected" : "=" }, { "version_value" : "3.18.14", "version_affected" : "=" }, { "version_value" : "3.18.15", "version_affected" : "=" }, { "version_value" : "3.18.16", "version_affected" : "=" }, { "version_value" : "3.18.17", "version_affected" : "=" }, { "version_value" : "3.18.18", "version_affected" : "=" }, { "version_value" : "3.18.19", "version_affected" : "=" }, { "version_value" : "3.18.20", "version_affected" : "=" }, { "version_value" : "3.18.21", "version_affected" : "=" }, { "version_value" : "3.18.22", "version_affected" : "=" }, { "version_value" : "3.18.23", "version_affected" : "=" }, { "version_value" : "3.18.24", "version_affected" : "=" }, { "version_value" : "3.18.25", "version_affected" : "=" }, { "version_value" : "3.18.26", "version_affected" : "=" }, { "version_value" : "3.18.27", "version_affected" : "=" }, { "version_value" : "3.18.28", "version_affected" : "=" }, { "version_value" : "3.18.29", "version_affected" : "=" }, { "version_value" : "3.18.30", "version_affected" : "=" }, { "version_value" : "3.18.31", "version_affected" : "=" }, { "version_value" : "3.18.32", "version_affected" : "=" }, { "version_value" : "3.18.33", "version_affected" : "=" }, { "version_value" : "3.18.34", "version_affected" : "=" }, { "version_value" : "3.18.35", "version_affected" : "=" }, { "version_value" : "3.18.36", "version_affected" : "=" }, { "version_value" : "3.18.37", "version_affected" : "=" }, { "version_value" : "3.18.38", "version_affected" : "=" }, { "version_value" : "3.18.39", "version_affected" : "=" }, { "version_value" : "3.18.40", "version_affected" : "=" }, { "version_value" : "3.18.41", "version_affected" : "=" }, { "version_value" : "3.18.42", "version_affected" : "=" }, { "version_value" : "3.18.43", "version_affected" : "=" }, { "version_value" : "3.18.44", "version_affected" : "=" }, { "version_value" : "3.18.45", "version_affected" : "=" }, { "version_value" : "3.18.46", "version_affected" : "=" }, { "version_value" : "3.18.47", "version_affected" : "=" }, { "version_value" : "3.18.48", "version_affected" : "=" }, { "version_value" : "3.18.49", "version_affected" : "=" }, { "version_value" : "3.18.50", "version_affected" : "=" }, { "version_value" : "3.18.51", "version_affected" : "=" }, { "version_value" : "3.18.52", "version_affected" : "=" }, { "version_value" : "3.18.53", "version_affected" : "=" }, { "version_value" : "3.18.54", "version_affected" : "=" }, { "version_value" : "3.18.55", "version_affected" : "=" }, { "version_value" : "3.18.56", "version_affected" : "=" }, { "version_value" : "3.18.57", "version_affected" : "=" }, { "version_value" : "3.18.58", "version_affected" : "=" }, { "version_value" : "3.18.59", "version_affected" : "=" }, { "version_value" : "3.18.60", "version_affected" : "=" }, { "version_value" : "3.18.61", "version_affected" : "=" }, { "version_value" : "3.18.62", "version_affected" : "=" }, { "version_value" : "3.18.63", "version_affected" : "=" }, { "version_value" : "3.18.64", "version_affected" : "=" }, { "version_value" : "3.18.65", "version_affected" : "=" }, { "version_value" : "3.18.66", "version_affected" : "=" }, { "version_value" : "3.19", "version_affected" : "=" }, { "version_value" : "3.19.1", "version_affected" : "=" }, { "version_value" : "3.19.2", "version_affected" : "=" }, { "version_value" : "3.19.3", "version_affected" : "=" }, { "version_value" : "3.19.4", "version_affected" : "=" }, { "version_value" : "3.19.5", "version_affected" : "=" }, { "version_value" : "3.19.6", "version_affected" : "=" }, { "version_value" : "3.19.7", "version_affected" : "=" }, { "version_value" : "3.19.8", "version_affected" : "=" }, { "version_value" : "4", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.1.8", "version_affected" : "=" }, { "version_value" : "4.1.9", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.1.11", "version_affected" : "=" }, { "version_value" : "4.1.12", "version_affected" : "=" }, { "version_value" : "4.1.13", "version_affected" : "=" }, { "version_value" : "4.1.14", "version_affected" : "=" }, { "version_value" : "4.1.15", "version_affected" : "=" }, { "version_value" : "4.1.16", "version_affected" : "=" }, { "version_value" : "4.1.17", "version_affected" : "=" }, { "version_value" : "4.1.18", "version_affected" : "=" }, { "version_value" : "4.1.19", "version_affected" : "=" }, { "version_value" : "4.1.20", "version_affected" : "=" }, { "version_value" : "4.1.21", "version_affected" : "=" }, { "version_value" : "4.1.22", "version_affected" : "=" }, { "version_value" : "4.1.23", "version_affected" : "=" }, { "version_value" : "4.1.24", "version_affected" : "=" }, { "version_value" : "4.1.25", "version_affected" : "=" }, { "version_value" : "4.1.26", "version_affected" : "=" }, { "version_value" : "4.1.27", "version_affected" : "=" }, { "version_value" : "4.1.28", "version_affected" : "=" }, { "version_value" : "4.1.29", "version_affected" : "=" }, { "version_value" : "4.1.30", "version_affected" : "=" }, { "version_value" : "4.1.31", "version_affected" : "=" }, { "version_value" : "4.1.32", "version_affected" : "=" }, { "version_value" : "4.1.33", "version_affected" : "=" }, { "version_value" : "4.1.34", "version_affected" : "=" }, { "version_value" : "4.1.35", "version_affected" : "=" }, { "version_value" : "4.1.36", "version_affected" : "=" }, { "version_value" : "4.1.37", "version_affected" : "=" }, { "version_value" : "4.1.38", "version_affected" : "=" }, { "version_value" : "4.1.39", "version_affected" : "=" }, { "version_value" : "4.1.40", "version_affected" : "=" }, { "version_value" : "4.1.41", "version_affected" : "=" }, { "version_value" : "4.1.42", "version_affected" : "=" }, { "version_value" : "4.1.43", "version_affected" : "=" }, { "version_value" : "4.1.44", "version_affected" : "=" }, { "version_value" : "4.1.45", "version_affected" : "=" }, { "version_value" : "4.1.46", "version_affected" : "=" }, { "version_value" : "4.1.47", "version_affected" : "=" }, { "version_value" : "4.1.48", "version_affected" : "=" }, { "version_value" : "4.1.49", "version_affected" : "=" }, { "version_value" : "4.1.50", "version_affected" : "=" }, { "version_value" : "4.1.51", "version_affected" : "=" }, { "version_value" : "4.1.52", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.2.4", "version_affected" : "=" }, { "version_value" : "4.2.5", "version_affected" : "=" }, { "version_value" : "4.2.6", "version_affected" : "=" }, { "version_value" : "4.2.7", "version_affected" : "=" }, { "version_value" : "4.2.8", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.4.4", "version_affected" : "=" }, { "version_value" : "4.4.5", "version_affected" : "=" }, { "version_value" : "4.4.6", "version_affected" : "=" }, { "version_value" : "4.4.7", "version_affected" : "=" }, { "version_value" : "4.4.8", "version_affected" : "=" }, { "version_value" : "4.4.9", "version_affected" : "=" }, { "version_value" : "4.4.10", "version_affected" : "=" }, { "version_value" : "4.4.11", "version_affected" : "=" }, { "version_value" : "4.4.12", "version_affected" : "=" }, { "version_value" : "4.4.13", "version_affected" : "=" }, { "version_value" : "4.4.14", "version_affected" : "=" }, { "version_value" : "4.4.15", "version_affected" : "=" }, { "version_value" : "4.4.16", "version_affected" : "=" }, { "version_value" : "4.4.17", "version_affected" : "=" }, { "version_value" : "4.4.18", "version_affected" : "=" }, { "version_value" : "4.4.19", "version_affected" : "=" }, { "version_value" : "4.4.20", "version_affected" : "=" }, { "version_value" : "4.4.21", "version_affected" : "=" }, { "version_value" : "4.4.22", "version_affected" : "=" }, { "version_value" : "4.4.23", "version_affected" : "=" }, { "version_value" : "4.4.24", "version_affected" : "=" }, { "version_value" : "4.4.25", "version_affected" : "=" }, { "version_value" : "4.4.26", "version_affected" : "=" }, { "version_value" : "4.4.27", "version_affected" : "=" }, { "version_value" : "4.4.28", "version_affected" : "=" }, { "version_value" : "4.4.29", "version_affected" : "=" }, { "version_value" : "4.4.30", "version_affected" : "=" }, { "version_value" : "4.4.31", "version_affected" : "=" }, { "version_value" : "4.4.32", "version_affected" : "=" }, { "version_value" : "4.4.33", "version_affected" : "=" }, { "version_value" : "4.4.34", "version_affected" : "=" }, { "version_value" : "4.4.35", "version_affected" : "=" }, { "version_value" : "4.4.36", "version_affected" : "=" }, { "version_value" : "4.4.37", "version_affected" : "=" }, { "version_value" : "4.4.38", "version_affected" : "=" }, { "version_value" : "4.4.39", "version_affected" : "=" }, { "version_value" : "4.4.40", "version_affected" : "=" }, { "version_value" : "4.4.41", "version_affected" : "=" }, { "version_value" : "4.4.42", "version_affected" : "=" }, { "version_value" : "4.4.43", "version_affected" : "=" }, { "version_value" : "4.4.44", "version_affected" : "=" }, { "version_value" : "4.4.45", "version_affected" : "=" }, { "version_value" : "4.4.46", "version_affected" : "=" }, { "version_value" : "4.4.47", "version_affected" : "=" }, { "version_value" : "4.4.48", "version_affected" : "=" }, { "version_value" : "4.4.49", "version_affected" : "=" }, { "version_value" : "4.4.50", "version_affected" : "=" }, { "version_value" : "4.4.51", "version_affected" : "=" }, { "version_value" : "4.4.52", "version_affected" : "=" }, { "version_value" : "4.4.53", "version_affected" : "=" }, { "version_value" : "4.4.54", "version_affected" : "=" }, { "version_value" : "4.4.55", "version_affected" : "=" }, { "version_value" : "4.4.56", "version_affected" : "=" }, { "version_value" : "4.4.57", "version_affected" : "=" }, { "version_value" : "4.4.58", "version_affected" : "=" }, { "version_value" : "4.4.59", "version_affected" : "=" }, { "version_value" : "4.4.60", "version_affected" : "=" }, { "version_value" : "4.4.61", "version_affected" : "=" }, { "version_value" : "4.4.62", "version_affected" : "=" }, { "version_value" : "4.4.63", "version_affected" : "=" }, { "version_value" : "4.4.64", "version_affected" : "=" }, { "version_value" : "4.4.65", "version_affected" : "=" }, { "version_value" : "4.4.66", "version_affected" : "=" }, { "version_value" : "4.4.67", "version_affected" : "=" }, { "version_value" : "4.4.68", "version_affected" : "=" }, { "version_value" : "4.4.69", "version_affected" : "=" }, { "version_value" : "4.4.70", "version_affected" : "=" }, { "version_value" : "4.4.71", "version_affected" : "=" }, { "version_value" : "4.4.72", "version_affected" : "=" }, { "version_value" : "4.4.73", "version_affected" : "=" }, { "version_value" : "4.4.74", "version_affected" : "=" }, { "version_value" : "4.4.75", "version_affected" : "=" }, { "version_value" : "4.4.76", "version_affected" : "=" }, { "version_value" : "4.4.77", "version_affected" : "=" }, { "version_value" : "4.4.78", "version_affected" : "=" }, { "version_value" : "4.4.79", "version_affected" : "=" }, { "version_value" : "4.4.80", "version_affected" : "=" }, { "version_value" : "4.4.81", "version_affected" : "=" }, { "version_value" : "4.4.82", "version_affected" : "=" }, { "version_value" : "4.4.83", "version_affected" : "=" }, { "version_value" : "4.4.84", "version_affected" : "=" }, { "version_value" : "4.4.85", "version_affected" : "=" }, { "version_value" : "4.4.86", "version_affected" : "=" }, { "version_value" : "4.4.87", "version_affected" : "=" }, { "version_value" : "4.4.88", "version_affected" : "=" }, { "version_value" : "4.4.89", "version_affected" : "=" }, { "version_value" : "4.4.90", "version_affected" : "=" }, { "version_value" : "4.4.91", "version_affected" : "=" }, { "version_value" : "4.4.92", "version_affected" : "=" }, { "version_value" : "4.4.93", "version_affected" : "=" }, { "version_value" : "4.4.94", "version_affected" : "=" }, { "version_value" : "4.4.95", "version_affected" : "=" }, { "version_value" : "4.4.96", "version_affected" : "=" }, { "version_value" : "4.4.97", "version_affected" : "=" }, { "version_value" : "4.4.98", "version_affected" : "=" }, { "version_value" : "4.4.99", "version_affected" : "=" }, { "version_value" : "4.4.100", "version_affected" : "=" }, { "version_value" : "4.4.101", "version_affected" : "=" }, { "version_value" : "4.4.102", "version_affected" : "=" }, { "version_value" : "4.4.103", "version_affected" : "=" }, { "version_value" : "4.4.104", "version_affected" : "=" }, { "version_value" : "4.4.105", "version_affected" : "=" }, { "version_value" : "4.4.106", "version_affected" : "=" }, { "version_value" : "4.4.107", "version_affected" : "=" }, { "version_value" : "4.4.108", "version_affected" : "=" }, { "version_value" : "4.4.109", "version_affected" : "=" }, { "version_value" : "4.4.110", "version_affected" : "=" }, { "version_value" : "4.4.111", "version_affected" : "=" }, { "version_value" : "4.4.112", "version_affected" : "=" }, { "version_value" : "4.4.113", "version_affected" : "=" }, { "version_value" : "4.4.114", "version_affected" : "=" }, { "version_value" : "4.4.115", "version_affected" : "=" }, { "version_value" : "4.4.116", "version_affected" : "=" }, { "version_value" : "4.4.117", "version_affected" : "=" }, { "version_value" : "4.4.118", "version_affected" : "=" }, { "version_value" : "4.4.119", "version_affected" : "=" }, { "version_value" : "4.4.120", "version_affected" : "=" }, { "version_value" : "4.4.121", "version_affected" : "=" }, { "version_value" : "4.4.122", "version_affected" : "=" }, { "version_value" : "4.4.123", "version_affected" : "=" }, { "version_value" : "4.4.124", "version_affected" : "=" }, { "version_value" : "4.4.125", "version_affected" : "=" }, { "version_value" : "4.4.126", "version_affected" : "=" }, { "version_value" : "4.4.127", "version_affected" : "=" }, { "version_value" : "4.4.128", "version_affected" : "=" }, { "version_value" : "4.4.129", "version_affected" : "=" }, { "version_value" : "4.4.130", "version_affected" : "=" }, { "version_value" : "4.4.131", "version_affected" : "=" }, { "version_value" : "4.4.132", "version_affected" : "=" }, { "version_value" : "4.4.133", "version_affected" : "=" }, { "version_value" : "4.4.134", "version_affected" : "=" }, { "version_value" : "4.4.135", "version_affected" : "=" }, { "version_value" : "4.4.136", "version_affected" : "=" }, { "version_value" : "4.4.137", "version_affected" : "=" }, { "version_value" : "4.4.138", "version_affected" : "=" }, { "version_value" : "4.4.139", "version_affected" : "=" }, { "version_value" : "4.4.140", "version_affected" : "=" }, { "version_value" : "4.4.141", "version_affected" : "=" }, { "version_value" : "4.4.142", "version_affected" : "=" }, { "version_value" : "4.4.143", "version_affected" : "=" }, { "version_value" : "4.4.144", "version_affected" : "=" }, { "version_value" : "4.4.145", "version_affected" : "=" }, { "version_value" : "4.4.146", "version_affected" : "=" }, { "version_value" : "4.4.147", "version_affected" : "=" }, { "version_value" : "4.4.148", "version_affected" : "=" }, { "version_value" : "4.4.149", "version_affected" : "=" }, { "version_value" : "4.4.150", "version_affected" : "=" }, { "version_value" : "4.4.151", "version_affected" : "=" }, { "version_value" : "4.4.152", "version_affected" : "=" }, { "version_value" : "4.4.153", "version_affected" : "=" }, { "version_value" : "4.4.154", "version_affected" : "=" }, { "version_value" : "4.4.155", "version_affected" : "=" }, { "version_value" : "4.4.156", "version_affected" : "=" }, { "version_value" : "4.4.157", "version_affected" : "=" }, { "version_value" : "4.4.158", "version_affected" : "=" }, { "version_value" : "4.4.159", "version_affected" : "=" }, { "version_value" : "4.4.160", "version_affected" : "=" }, { "version_value" : "4.4.161", "version_affected" : "=" }, { "version_value" : "4.4.162", "version_affected" : "=" }, { "version_value" : "4.4.163", "version_affected" : "=" }, { "version_value" : "4.4.164", "version_affected" : "=" }, { "version_value" : "4.4.165", "version_affected" : "=" }, { "version_value" : "4.4.166", "version_affected" : "=" }, { "version_value" : "4.4.167", "version_affected" : "=" }, { "version_value" : "4.4.168", "version_affected" : "=" }, { "version_value" : "4.4.169", "version_affected" : "=" }, { "version_value" : "4.4.170", "version_affected" : "=" }, { "version_value" : "4.4.171", "version_affected" : "=" }, { "version_value" : "4.4.172", "version_affected" : "=" }, { "version_value" : "4.4.173", "version_affected" : "=" }, { "version_value" : "4.4.174", "version_affected" : "=" }, { "version_value" : "4.4.175", "version_affected" : "=" }, { "version_value" : "4.4.176", "version_affected" : "=" }, { "version_value" : "4.4.177", "version_affected" : "=" }, { "version_value" : "4.4.178", "version_affected" : "=" }, { "version_value" : "4.4.179", "version_affected" : "=" }, { "version_value" : "4.4.180", "version_affected" : "=" }, { "version_value" : "4.4.181", "version_affected" : "=" }, { "version_value" : "4.4.182", "version_affected" : "=" }, { "version_value" : "4.4.183", "version_affected" : "=" }, { "version_value" : "4.4.184", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" }, { "version_value" : "4.5.7", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.8.1", "version_affected" : "=" }, { "version_value" : "4.8.2", "version_affected" : "=" }, { "version_value" : "4.8.3", "version_affected" : "=" }, { "version_value" : "4.8.4", "version_affected" : "=" }, { "version_value" : "4.8.5", "version_affected" : "=" }, { "version_value" : "4.8.6", "version_affected" : "=" }, { "version_value" : "4.8.7", "version_affected" : "=" }, { "version_value" : "4.8.8", "version_affected" : "=" }, { "version_value" : "4.8.9", "version_affected" : "=" }, { "version_value" : "4.8.10", "version_affected" : "=" }, { "version_value" : "4.8.11", "version_affected" : "=" }, { "version_value" : "4.8.12", "version_affected" : "=" }, { "version_value" : "4.8.13", "version_affected" : "=" }, { "version_value" : "4.8.14", "version_affected" : "=" }, { "version_value" : "4.8.15", "version_affected" : "=" }, { "version_value" : "4.8.16", "version_affected" : "=" }, { "version_value" : "4.8.17", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.9.1", "version_affected" : "=" }, { "version_value" : "4.9.2", "version_affected" : "=" }, { "version_value" : "4.9.3", "version_affected" : "=" }, { "version_value" : "4.9.4", "version_affected" : "=" }, { "version_value" : "4.9.5", "version_affected" : "=" }, { "version_value" : "4.9.6", "version_affected" : "=" }, { "version_value" : "4.9.7", "version_affected" : "=" }, { "version_value" : "4.9.8", "version_affected" : "=" }, { "version_value" : "4.9.9", "version_affected" : "=" }, { "version_value" : "4.9.10", "version_affected" : "=" }, { "version_value" : "4.9.11", "version_affected" : "=" }, { "version_value" : "4.9.12", "version_affected" : "=" }, { "version_value" : "4.9.13", "version_affected" : "=" }, { "version_value" : "4.9.14", "version_affected" : "=" }, { "version_value" : "4.9.15", "version_affected" : "=" }, { "version_value" : "4.9.16", "version_affected" : "=" }, { "version_value" : "4.9.17", "version_affected" : "=" }, { "version_value" : "4.9.18", "version_affected" : "=" }, { "version_value" : "4.9.19", "version_affected" : "=" }, { "version_value" : "4.9.20", "version_affected" : "=" }, { "version_value" : "4.9.21", "version_affected" : "=" }, { "version_value" : "4.9.22", "version_affected" : "=" }, { "version_value" : "4.9.23", "version_affected" : "=" }, { "version_value" : "4.9.24", "version_affected" : "=" }, { "version_value" : "4.9.25", "version_affected" : "=" }, { "version_value" : "4.9.26", "version_affected" : "=" }, { "version_value" : "4.9.27", "version_affected" : "=" }, { "version_value" : "4.9.28", "version_affected" : "=" }, { "version_value" : "4.9.29", "version_affected" : "=" }, { "version_value" : "4.9.30", "version_affected" : "=" }, { "version_value" : "4.9.31", "version_affected" : "=" }, { "version_value" : "4.9.32", "version_affected" : "=" }, { "version_value" : "4.9.33", "version_affected" : "=" }, { "version_value" : "4.9.34", "version_affected" : "=" }, { "version_value" : "4.9.35", "version_affected" : "=" }, { "version_value" : "4.9.36", "version_affected" : "=" }, { "version_value" : "4.9.37", "version_affected" : "=" }, { "version_value" : "4.9.38", "version_affected" : "=" }, { "version_value" : "4.9.39", "version_affected" : "=" }, { "version_value" : "4.9.40", "version_affected" : "=" }, { "version_value" : "4.9.41", "version_affected" : "=" }, { "version_value" : "4.9.42", "version_affected" : "=" }, { "version_value" : "4.9.43", "version_affected" : "=" }, { "version_value" : "4.9.44", "version_affected" : "=" }, { "version_value" : "4.9.45", "version_affected" : "=" }, { "version_value" : "4.9.46", "version_affected" : "=" }, { "version_value" : "4.9.47", "version_affected" : "=" }, { "version_value" : "4.9.48", "version_affected" : "=" }, { "version_value" : "4.9.49", "version_affected" : "=" }, { "version_value" : "4.9.50", "version_affected" : "=" }, { "version_value" : "4.9.51", "version_affected" : "=" }, { "version_value" : "4.9.52", "version_affected" : "=" }, { "version_value" : "4.9.53", "version_affected" : "=" }, { "version_value" : "4.9.54", "version_affected" : "=" }, { "version_value" : "4.9.55", "version_affected" : "=" }, { "version_value" : "4.9.56", "version_affected" : "=" }, { "version_value" : "4.9.57", "version_affected" : "=" }, { "version_value" : "4.9.58", "version_affected" : "=" }, { "version_value" : "4.9.59", "version_affected" : "=" }, { "version_value" : "4.9.60", "version_affected" : "=" }, { "version_value" : "4.9.61", "version_affected" : "=" }, { "version_value" : "4.9.62", "version_affected" : "=" }, { "version_value" : "4.9.63", "version_affected" : "=" }, { "version_value" : "4.9.64", "version_affected" : "=" }, { "version_value" : "4.9.65", "version_affected" : "=" }, { "version_value" : "4.9.66", "version_affected" : "=" }, { "version_value" : "4.9.67", "version_affected" : "=" }, { "version_value" : "4.9.68", "version_affected" : "=" }, { "version_value" : "4.9.69", "version_affected" : "=" }, { "version_value" : "4.9.70", "version_affected" : "=" }, { "version_value" : "4.9.71", "version_affected" : "=" }, { "version_value" : "4.9.72", "version_affected" : "=" }, { "version_value" : "4.9.73", "version_affected" : "=" }, { "version_value" : "4.9.74", "version_affected" : "=" }, { "version_value" : "4.9.75", "version_affected" : "=" }, { "version_value" : "4.9.76", "version_affected" : "=" }, { "version_value" : "4.9.77", "version_affected" : "=" }, { "version_value" : "4.9.78", "version_affected" : "=" }, { "version_value" : "4.9.79", "version_affected" : "=" }, { "version_value" : "4.9.80", "version_affected" : "=" }, { "version_value" : "4.9.81", "version_affected" : "=" }, { "version_value" : "4.9.82", "version_affected" : "=" }, { "version_value" : "4.9.83", "version_affected" : "=" }, { "version_value" : "4.9.84", "version_affected" : "=" }, { "version_value" : "4.9.85", "version_affected" : "=" }, { "version_value" : "4.9.86", "version_affected" : "=" }, { "version_value" : "4.9.87", "version_affected" : "=" }, { "version_value" : "4.9.88", "version_affected" : "=" }, { "version_value" : "4.9.89", "version_affected" : "=" }, { "version_value" : "4.9.90", "version_affected" : "=" }, { "version_value" : "4.9.91", "version_affected" : "=" }, { "version_value" : "4.9.92", "version_affected" : "=" }, { "version_value" : "4.9.93", "version_affected" : "=" }, { "version_value" : "4.9.94", "version_affected" : "=" }, { "version_value" : "4.9.95", "version_affected" : "=" }, { "version_value" : "4.9.96", "version_affected" : "=" }, { "version_value" : "4.9.97", "version_affected" : "=" }, { "version_value" : "4.9.98", "version_affected" : "=" }, { "version_value" : "4.9.99", "version_affected" : "=" }, { "version_value" : "4.9.100", "version_affected" : "=" }, { "version_value" : "4.9.101", "version_affected" : "=" }, { "version_value" : "4.9.102", "version_affected" : "=" }, { "version_value" : "4.9.103", "version_affected" : "=" }, { "version_value" : "4.9.104", "version_affected" : "=" }, { "version_value" : "4.9.105", "version_affected" : "=" }, { "version_value" : "4.9.106", "version_affected" : "=" }, { "version_value" : "4.9.107", "version_affected" : "=" }, { "version_value" : "4.9.108", "version_affected" : "=" }, { "version_value" : "4.9.109", "version_affected" : "=" }, { "version_value" : "4.9.110", "version_affected" : "=" }, { "version_value" : "4.9.111", "version_affected" : "=" }, { "version_value" : "4.9.112", "version_affected" : "=" }, { "version_value" : "4.9.113", "version_affected" : "=" }, { "version_value" : "4.9.114", "version_affected" : "=" }, { "version_value" : "4.9.115", "version_affected" : "=" }, { "version_value" : "4.9.116", "version_affected" : "=" }, { "version_value" : "4.9.117", "version_affected" : "=" }, { "version_value" : "4.9.118", "version_affected" : "=" }, { "version_value" : "4.9.119", "version_affected" : "=" }, { "version_value" : "4.9.120", "version_affected" : "=" }, { "version_value" : "4.9.121", "version_affected" : "=" }, { "version_value" : "4.9.122", "version_affected" : "=" }, { "version_value" : "4.9.123", "version_affected" : "=" }, { "version_value" : "4.9.124", "version_affected" : "=" }, { "version_value" : "4.9.125", "version_affected" : "=" }, { "version_value" : "4.9.126", "version_affected" : "=" }, { "version_value" : "4.9.127", "version_affected" : "=" }, { "version_value" : "4.9.128", "version_affected" : "=" }, { "version_value" : "4.9.129", "version_affected" : "=" }, { "version_value" : "4.9.130", "version_affected" : "=" }, { "version_value" : "4.9.131", "version_affected" : "=" }, { "version_value" : "4.9.132", "version_affected" : "=" }, { "version_value" : "4.9.133", "version_affected" : "=" }, { "version_value" : "4.9.134", "version_affected" : "=" }, { "version_value" : "4.9.135", "version_affected" : "=" }, { "version_value" : "4.9.136", "version_affected" : "=" }, { "version_value" : "4.9.137", "version_affected" : "=" }, { "version_value" : "4.9.138", "version_affected" : "=" }, { "version_value" : "4.9.139", "version_affected" : "=" }, { "version_value" : "4.9.140", "version_affected" : "=" }, { "version_value" : "4.9.141", "version_affected" : "=" }, { "version_value" : "4.9.142", "version_affected" : "=" }, { "version_value" : "4.9.143", "version_affected" : "=" }, { "version_value" : "4.9.144", "version_affected" : "=" }, { "version_value" : "4.9.145", "version_affected" : "=" }, { "version_value" : "4.9.146", "version_affected" : "=" }, { "version_value" : "4.9.147", "version_affected" : "=" }, { "version_value" : "4.9.148", "version_affected" : "=" }, { "version_value" : "4.9.149", "version_affected" : "=" }, { "version_value" : "4.9.150", "version_affected" : "=" }, { "version_value" : "4.9.151", "version_affected" : "=" }, { "version_value" : "4.9.152", "version_affected" : "=" }, { "version_value" : "4.9.153", "version_affected" : "=" }, { "version_value" : "4.9.154", "version_affected" : "=" }, { "version_value" : "4.9.155", "version_affected" : "=" }, { "version_value" : "4.9.156", "version_affected" : "=" }, { "version_value" : "4.9.157", "version_affected" : "=" }, { "version_value" : "4.9.158", "version_affected" : "=" }, { "version_value" : "4.9.159", "version_affected" : "=" }, { "version_value" : "4.9.160", "version_affected" : "=" }, { "version_value" : "4.9.161", "version_affected" : "=" }, { "version_value" : "4.9.162", "version_affected" : "=" }, { "version_value" : "4.9.163", "version_affected" : "=" }, { "version_value" : "4.9.164", "version_affected" : "=" }, { "version_value" : "4.9.165", "version_affected" : "=" }, { "version_value" : "4.9.166", "version_affected" : "=" }, { "version_value" : "4.9.167", "version_affected" : "=" }, { "version_value" : "4.9.168", "version_affected" : "=" }, { "version_value" : "4.9.169", "version_affected" : "=" }, { "version_value" : "4.9.170", "version_affected" : "=" }, { "version_value" : "4.9.171", "version_affected" : "=" }, { "version_value" : "4.9.172", "version_affected" : "=" }, { "version_value" : "4.9.173", "version_affected" : "=" }, { "version_value" : "4.9.174", "version_affected" : "=" }, { "version_value" : "4.9.175", "version_affected" : "=" }, { "version_value" : "4.9.176", "version_affected" : "=" }, { "version_value" : "4.9.177", "version_affected" : "=" }, { "version_value" : "4.9.178", "version_affected" : "=" }, { "version_value" : "4.9.179", "version_affected" : "=" }, { "version_value" : "4.9.180", "version_affected" : "=" }, { "version_value" : "4.9.181", "version_affected" : "=" }, { "version_value" : "4.9.182", "version_affected" : "=" }, { "version_value" : "4.9.183", "version_affected" : "=" }, { "version_value" : "4.9.184", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.10.1", "version_affected" : "=" }, { "version_value" : "4.10.2", "version_affected" : "=" }, { "version_value" : "4.10.3", "version_affected" : "=" }, { "version_value" : "4.10.4", "version_affected" : "=" }, { "version_value" : "4.10.5", "version_affected" : "=" }, { "version_value" : "4.10.6", "version_affected" : "=" }, { "version_value" : "4.10.7", "version_affected" : "=" }, { "version_value" : "4.10.8", "version_affected" : "=" }, { "version_value" : "4.10.9", "version_affected" : "=" }, { "version_value" : "4.10.10", "version_affected" : "=" }, { "version_value" : "4.10.11", "version_affected" : "=" }, { "version_value" : "4.10.12", "version_affected" : "=" }, { "version_value" : "4.10.13", "version_affected" : "=" }, { "version_value" : "4.10.14", "version_affected" : "=" }, { "version_value" : "4.10.15", "version_affected" : "=" }, { "version_value" : "4.10.16", "version_affected" : "=" }, { "version_value" : "4.10.17", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "4.11.1", "version_affected" : "=" }, { "version_value" : "4.11.2", "version_affected" : "=" }, { "version_value" : "4.11.3", "version_affected" : "=" }, { "version_value" : "4.11.4", "version_affected" : "=" }, { "version_value" : "4.11.5", "version_affected" : "=" }, { "version_value" : "4.11.6", "version_affected" : "=" }, { "version_value" : "4.11.7", "version_affected" : "=" }, { "version_value" : "4.11.8", "version_affected" : "=" }, { "version_value" : "4.11.9", "version_affected" : "=" }, { "version_value" : "4.11.10", "version_affected" : "=" }, { "version_value" : "4.11.11", "version_affected" : "=" }, { "version_value" : "4.11.12", "version_affected" : "=" }, { "version_value" : "4.12", "version_affected" : "=" }, { "version_value" : "4.12.1", "version_affected" : "=" }, { "version_value" : "4.12.2", "version_affected" : "=" }, { "version_value" : "4.12.3", "version_affected" : "=" }, { "version_value" : "4.12.4", "version_affected" : "=" }, { "version_value" : "4.12.5", "version_affected" : "=" }, { "version_value" : "4.12.6", "version_affected" : "=" }, { "version_value" : "4.12.7", "version_affected" : "=" }, { "version_value" : "4.12.8", "version_affected" : "=" }, { "version_value" : "4.12.9", "version_affected" : "=" }, { "version_value" : "4.12.10", "version_affected" : "=" }, { "version_value" : "4.12.11", "version_affected" : "=" }, { "version_value" : "4.12.12", "version_affected" : "=" }, { "version_value" : "4.12.13", "version_affected" : "=" }, { "version_value" : "4.12.14", "version_affected" : "=" }, { "version_value" : "4.13", "version_affected" : "=" }, { "version_value" : "4.13.1", "version_affected" : "=" }, { "version_value" : "4.13.2", "version_affected" : "=" }, { "version_value" : "4.13.3", "version_affected" : "=" }, { "version_value" : "4.13.4", "version_affected" : "=" }, { "version_value" : "4.13.5", "version_affected" : "=" }, { "version_value" : "4.13.6", "version_affected" : "=" }, { "version_value" : "4.13.7", "version_affected" : "=" }, { "version_value" : "4.13.8", "version_affected" : "=" }, { "version_value" : "4.13.9", "version_affected" : "=" }, { "version_value" : "4.13.10", "version_affected" : "=" }, { "version_value" : "4.13.11", "version_affected" : "=" }, { "version_value" : "4.13.12", "version_affected" : "=" }, { "version_value" : "4.13.13", "version_affected" : "=" }, { "version_value" : "4.13.14", "version_affected" : "=" }, { "version_value" : "4.13.15", "version_affected" : "=" }, { "version_value" : "4.13.16", "version_affected" : "=" }, { "version_value" : "4.14", "version_affected" : "=" }, { "version_value" : "4.14.1", "version_affected" : "=" }, { "version_value" : "4.14.2", "version_affected" : "=" }, { "version_value" : "4.14.3", "version_affected" : "=" }, { "version_value" : "4.14.4", "version_affected" : "=" }, { "version_value" : "4.14.5", "version_affected" : "=" }, { "version_value" : "4.14.6", "version_affected" : "=" }, { "version_value" : "4.14.7", "version_affected" : "=" }, { "version_value" : "4.14.8", "version_affected" : "=" }, { "version_value" : "4.14.9", "version_affected" : "=" }, { "version_value" : "4.14.10", "version_affected" : "=" }, { "version_value" : "4.14.11", "version_affected" : "=" }, { "version_value" : "4.14.12", "version_affected" : "=" }, { "version_value" : "4.14.13", "version_affected" : "=" }, { "version_value" : "4.14.14", "version_affected" : "=" }, { "version_value" : "4.14.15", "version_affected" : "=" }, { "version_value" : "4.14.16", "version_affected" : "=" }, { "version_value" : "4.14.17", "version_affected" : "=" }, { "version_value" : "4.14.18", "version_affected" : "=" }, { "version_value" : "4.14.19", "version_affected" : "=" }, { "version_value" : "4.14.20", "version_affected" : "=" }, { "version_value" : "4.14.21", "version_affected" : "=" }, { "version_value" : "4.14.22", "version_affected" : "=" }, { "version_value" : "4.14.23", "version_affected" : "=" }, { "version_value" : "4.14.24", "version_affected" : "=" }, { "version_value" : "4.14.25", "version_affected" : "=" }, { "version_value" : "4.14.26", "version_affected" : "=" }, { "version_value" : "4.14.27", "version_affected" : "=" }, { "version_value" : "4.14.28", "version_affected" : "=" }, { "version_value" : "4.14.29", "version_affected" : "=" }, { "version_value" : "4.14.30", "version_affected" : "=" }, { "version_value" : "4.14.31", "version_affected" : "=" }, { "version_value" : "4.14.32", "version_affected" : "=" }, { "version_value" : "4.14.33", "version_affected" : "=" }, { "version_value" : "4.14.34", "version_affected" : "=" }, { "version_value" : "4.14.35", "version_affected" : "=" }, { "version_value" : "4.14.36", "version_affected" : "=" }, { "version_value" : "4.14.37", "version_affected" : "=" }, { "version_value" : "4.14.38", "version_affected" : "=" }, { "version_value" : "4.14.39", "version_affected" : "=" }, { "version_value" : "4.14.40", "version_affected" : "=" }, { "version_value" : "4.14.41", "version_affected" : "=" }, { "version_value" : "4.14.42", "version_affected" : "=" }, { "version_value" : "4.14.43", "version_affected" : "=" }, { "version_value" : "4.14.44", "version_affected" : "=" }, { "version_value" : "4.14.45", "version_affected" : "=" }, { "version_value" : "4.14.46", "version_affected" : "=" }, { "version_value" : "4.14.47", "version_affected" : "=" }, { "version_value" : "4.14.48", "version_affected" : "=" }, { "version_value" : "4.14.49", "version_affected" : "=" }, { "version_value" : "4.14.50", "version_affected" : "=" }, { "version_value" : "4.14.51", "version_affected" : "=" }, { "version_value" : "4.14.52", "version_affected" : "=" }, { "version_value" : "4.14.53", "version_affected" : "=" }, { "version_value" : "4.14.54", "version_affected" : "=" }, { "version_value" : "4.14.55", "version_affected" : "=" }, { "version_value" : "4.14.56", "version_affected" : "=" }, { "version_value" : "4.14.57", "version_affected" : "=" }, { "version_value" : "4.14.58", "version_affected" : "=" }, { "version_value" : "4.14.59", "version_affected" : "=" }, { "version_value" : "4.14.60", "version_affected" : "=" }, { "version_value" : "4.14.61", "version_affected" : "=" }, { "version_value" : "4.14.62", "version_affected" : "=" }, { "version_value" : "4.14.63", "version_affected" : "=" }, { "version_value" : "4.14.64", "version_affected" : "=" }, { "version_value" : "4.14.65", "version_affected" : "=" }, { "version_value" : "4.14.66", "version_affected" : "=" }, { "version_value" : "4.14.67", "version_affected" : "=" }, { "version_value" : "4.14.68", "version_affected" : "=" }, { "version_value" : "4.14.69", "version_affected" : "=" }, { "version_value" : "4.14.70", "version_affected" : "=" }, { "version_value" : "4.14.71", "version_affected" : "=" }, { "version_value" : "4.14.72", "version_affected" : "=" }, { "version_value" : "4.14.73", "version_affected" : "=" }, { "version_value" : "4.14.74", "version_affected" : "=" }, { "version_value" : "4.14.75", "version_affected" : "=" }, { "version_value" : "4.14.76", "version_affected" : "=" }, { "version_value" : "4.14.77", "version_affected" : "=" }, { "version_value" : "4.14.78", "version_affected" : "=" }, { "version_value" : "4.14.79", "version_affected" : "=" }, { "version_value" : "4.14.80", "version_affected" : "=" }, { "version_value" : "4.14.81", "version_affected" : "=" }, { "version_value" : "4.14.82", "version_affected" : "=" }, { "version_value" : "4.14.83", "version_affected" : "=" }, { "version_value" : "4.14.84", "version_affected" : "=" }, { "version_value" : "4.14.85", "version_affected" : "=" }, { "version_value" : "4.14.86", "version_affected" : "=" }, { "version_value" : "4.14.87", "version_affected" : "=" }, { "version_value" : "4.14.88", "version_affected" : "=" }, { "version_value" : "4.14.89", "version_affected" : "=" }, { "version_value" : "4.14.90", "version_affected" : "=" }, { "version_value" : "4.14.91", "version_affected" : "=" }, { "version_value" : "4.14.92", "version_affected" : "=" }, { "version_value" : "4.14.93", "version_affected" : "=" }, { "version_value" : "4.14.94", "version_affected" : "=" }, { "version_value" : "4.14.95", "version_affected" : "=" }, { "version_value" : "4.14.96", "version_affected" : "=" }, { "version_value" : "4.14.97", "version_affected" : "=" }, { "version_value" : "4.14.98", "version_affected" : "=" }, { "version_value" : "4.14.99", "version_affected" : "=" }, { "version_value" : "4.14.100", "version_affected" : "=" }, { "version_value" : "4.14.101", "version_affected" : "=" }, { "version_value" : "4.14.102", "version_affected" : "=" }, { "version_value" : "4.14.103", "version_affected" : "=" }, { "version_value" : "4.14.104", "version_affected" : "=" }, { "version_value" : "4.14.105", "version_affected" : "=" }, { "version_value" : "4.14.106", "version_affected" : "=" }, { "version_value" : "4.14.107", "version_affected" : "=" }, { "version_value" : "4.14.108", "version_affected" : "=" }, { "version_value" : "4.14.109", "version_affected" : "=" }, { "version_value" : "4.14.110", "version_affected" : "=" }, { "version_value" : "4.14.111", "version_affected" : "=" }, { "version_value" : "4.14.112", "version_affected" : "=" }, { "version_value" : "4.14.113", "version_affected" : "=" }, { "version_value" : "4.14.114", "version_affected" : "=" }, { "version_value" : "4.14.115", "version_affected" : "=" }, { "version_value" : "4.14.116", "version_affected" : "=" }, { "version_value" : "4.14.117", "version_affected" : "=" }, { "version_value" : "4.14.118", "version_affected" : "=" }, { "version_value" : "4.14.119", "version_affected" : "=" }, { "version_value" : "4.14.120", "version_affected" : "=" }, { "version_value" : "4.14.121", "version_affected" : "=" }, { "version_value" : "4.14.122", "version_affected" : "=" }, { "version_value" : "4.14.123", "version_affected" : "=" }, { "version_value" : "4.14.124", "version_affected" : "=" }, { "version_value" : "4.14.125", "version_affected" : "=" }, { "version_value" : "4.14.126", "version_affected" : "=" }, { "version_value" : "4.14.127", "version_affected" : "=" }, { "version_value" : "4.14.128", "version_affected" : "=" }, { "version_value" : "4.14.129", "version_affected" : "=" }, { "version_value" : "4.14.130", "version_affected" : "=" }, { "version_value" : "4.14.131", "version_affected" : "=" }, { "version_value" : "4.15", "version_affected" : "=" }, { "version_value" : "4.15.1", "version_affected" : "=" }, { "version_value" : "4.15.2", "version_affected" : "=" }, { "version_value" : "4.15.3", "version_affected" : "=" }, { "version_value" : "4.15.4", "version_affected" : "=" }, { "version_value" : "4.15.5", "version_affected" : "=" }, { "version_value" : "4.15.6", "version_affected" : "=" }, { "version_value" : "4.15.7", "version_affected" : "=" }, { "version_value" : "4.15.8", "version_affected" : "=" }, { "version_value" : "4.15.9", "version_affected" : "=" }, { "version_value" : "4.15.10", "version_affected" : "=" }, { "version_value" : "4.15.11", "version_affected" : "=" }, { "version_value" : "4.15.12", "version_affected" : "=" }, { "version_value" : "4.15.13", "version_affected" : "=" }, { "version_value" : "4.15.14", "version_affected" : "=" }, { "version_value" : "4.15.15", "version_affected" : "=" }, { "version_value" : "4.15.16", "version_affected" : "=" }, { "version_value" : "4.15.17", "version_affected" : "=" }, { "version_value" : "4.15.18", "version_affected" : "=" }, { "version_value" : "4.16", "version_affected" : "=" }, { "version_value" : "4.16.1", "version_affected" : "=" }, { "version_value" : "4.16.2", "version_affected" : "=" }, { "version_value" : "4.16.3", "version_affected" : "=" }, { "version_value" : "4.16.4", "version_affected" : "=" }, { "version_value" : "4.16.5", "version_affected" : "=" }, { "version_value" : "4.16.6", "version_affected" : "=" }, { "version_value" : "4.16.7", "version_affected" : "=" }, { "version_value" : "4.16.8", "version_affected" : "=" }, { "version_value" : "4.16.9", "version_affected" : "=" }, { "version_value" : "4.16.10", "version_affected" : "=" }, { "version_value" : "4.16.11", "version_affected" : "=" }, { "version_value" : "4.16.12", "version_affected" : "=" }, { "version_value" : "4.16.13", "version_affected" : "=" }, { "version_value" : "4.16.14", "version_affected" : "=" }, { "version_value" : "4.16.15", "version_affected" : "=" }, { "version_value" : "4.16.16", "version_affected" : "=" }, { "version_value" : "4.16.17", "version_affected" : "=" }, { "version_value" : "4.16.18", "version_affected" : "=" }, { "version_value" : "4.17", "version_affected" : "=" }, { "version_value" : "4.17.1", "version_affected" : "=" }, { "version_value" : "4.17.2", "version_affected" : "=" }, { "version_value" : "4.17.3", "version_affected" : "=" }, { "version_value" : "4.17.4", "version_affected" : "=" }, { "version_value" : "4.17.5", "version_affected" : "=" }, { "version_value" : "4.17.6", "version_affected" : "=" }, { "version_value" : "4.17.7", "version_affected" : "=" }, { "version_value" : "4.17.8", "version_affected" : "=" }, { "version_value" : "4.17.9", "version_affected" : "=" }, { "version_value" : "4.18", "version_affected" : "=" }, { "version_value" : "4.18.1", "version_affected" : "=" }, { "version_value" : "4.18.2", "version_affected" : "=" }, { "version_value" : "4.18.3", "version_affected" : "=" }, { "version_value" : "4.18.4", "version_affected" : "=" }, { "version_value" : "4.18.5", "version_affected" : "=" }, { "version_value" : "4.18.6", "version_affected" : "=" }, { "version_value" : "4.18.7", "version_affected" : "=" }, { "version_value" : "4.18.8", "version_affected" : "=" }, { "version_value" : "4.18.9", "version_affected" : "=" }, { "version_value" : "4.18.10", "version_affected" : "=" }, { "version_value" : "4.18.11", "version_affected" : "=" }, { "version_value" : "4.18.12", "version_affected" : "=" }, { "version_value" : "4.18.13", "version_affected" : "=" }, { "version_value" : "4.18.14", "version_affected" : "=" }, { "version_value" : "4.18.15", "version_affected" : "=" }, { "version_value" : "4.18.16", "version_affected" : "=" }, { "version_value" : "4.18.19", "version_affected" : "=" }, { "version_value" : "4.18.20", "version_affected" : "=" }, { "version_value" : "4.19", "version_affected" : "=" }, { "version_value" : "4.19.1", "version_affected" : "=" }, { "version_value" : "4.19.2", "version_affected" : "=" }, { "version_value" : "4.19.3", "version_affected" : "=" }, { "version_value" : "4.19.4", "version_affected" : "=" }, { "version_value" : "4.19.5", "version_affected" : "=" }, { "version_value" : "4.19.6", "version_affected" : "=" }, { "version_value" : "4.19.7", "version_affected" : "=" }, { "version_value" : "4.19.8", "version_affected" : "=" }, { "version_value" : "4.19.9", "version_affected" : "=" }, { "version_value" : "4.19.10", "version_affected" : "=" }, { "version_value" : "4.19.11", "version_affected" : "=" }, { "version_value" : "4.19.12", "version_affected" : "=" }, { "version_value" : "4.19.13", "version_affected" : "=" }, { "version_value" : "4.19.16", "version_affected" : "=" }, { "version_value" : "4.19.17", "version_affected" : "=" }, { "version_value" : "4.19.18", "version_affected" : "=" }, { "version_value" : "4.19.19", "version_affected" : "=" }, { "version_value" : "4.19.20", "version_affected" : "=" }, { "version_value" : "4.19.21", "version_affected" : "=" }, { "version_value" : "4.19.22", "version_affected" : "=" }, { "version_value" : "4.19.23", "version_affected" : "=" }, { "version_value" : "4.19.24", "version_affected" : "=" }, { "version_value" : "4.19.25", "version_affected" : "=" }, { "version_value" : "4.19.26", "version_affected" : "=" }, { "version_value" : "4.19.27", "version_affected" : "=" }, { "version_value" : "4.19.28", "version_affected" : "=" }, { "version_value" : "4.19.29", "version_affected" : "=" }, { "version_value" : "4.19.30", "version_affected" : "=" }, { "version_value" : "4.19.31", "version_affected" : "=" }, { "version_value" : "4.19.32", "version_affected" : "=" }, { "version_value" : "4.19.33", "version_affected" : "=" }, { "version_value" : "4.19.34", "version_affected" : "=" }, { "version_value" : "4.19.35", "version_affected" : "=" }, { "version_value" : "4.19.36", "version_affected" : "=" }, { "version_value" : "4.19.37", "version_affected" : "=" }, { "version_value" : "4.19.38", "version_affected" : "=" }, { "version_value" : "4.19.39", "version_affected" : "=" }, { "version_value" : "4.19.40", "version_affected" : "=" }, { "version_value" : "4.19.41", "version_affected" : "=" }, { "version_value" : "4.19.42", "version_affected" : "=" }, { "version_value" : "4.19.43", "version_affected" : "=" }, { "version_value" : "4.19.44", "version_affected" : "=" }, { "version_value" : "4.19.45", "version_affected" : "=" }, { "version_value" : "4.19.46", "version_affected" : "=" }, { "version_value" : "4.19.47", "version_affected" : "=" }, { "version_value" : "4.19.48", "version_affected" : "=" }, { "version_value" : "4.19.49", "version_affected" : "=" }, { "version_value" : "4.19.50", "version_affected" : "=" }, { "version_value" : "4.19.51", "version_affected" : "=" }, { "version_value" : "4.19.52", "version_affected" : "=" }, { "version_value" : "4.19.53", "version_affected" : "=" }, { "version_value" : "4.19.54", "version_affected" : "=" }, { "version_value" : "4.19.55", "version_affected" : "=" }, { "version_value" : "4.19.56", "version_affected" : "=" }, { "version_value" : "4.20", "version_affected" : "=" }, { "version_value" : "4.20.1", "version_affected" : "=" }, { "version_value" : "4.20.2", "version_affected" : "=" }, { "version_value" : "4.20.3", "version_affected" : "=" }, { "version_value" : "4.20.4", "version_affected" : "=" }, { "version_value" : "4.20.5", "version_affected" : "=" }, { "version_value" : "4.20.6", "version_affected" : "=" }, { "version_value" : "4.20.7", "version_affected" : "=" }, { "version_value" : "4.20.8", "version_affected" : "=" }, { "version_value" : "4.20.9", "version_affected" : "=" }, { "version_value" : "4.20.10", "version_affected" : "=" }, { "version_value" : "4.20.11", "version_affected" : "=" }, { "version_value" : "4.20.12", "version_affected" : "=" }, { "version_value" : "4.20.13", "version_affected" : "=" }, { "version_value" : "4.20.14", "version_affected" : "=" }, { "version_value" : "4.20.15", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.4", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" }, { "version_value" : "5.0.8", "version_affected" : "=" }, { "version_value" : "5.0.9", "version_affected" : "=" }, { "version_value" : "5.0.10", "version_affected" : "=" }, { "version_value" : "5.0.11", "version_affected" : "=" }, { "version_value" : "5.0.15", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html", "name" : "openSUSE-SU-2019:1716", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/109092", "name" : "109092", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://arxiv.org/pdf/1906.10478.pdf", "name" : "https://arxiv.org/pdf/1906.10478.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8", "name" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8", "refsource" : "MISC", "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ] }, { "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.7", "name" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.7", "refsource" : "MISC", "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ] }, { "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92", "name" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ] }, { "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df453700e8d81b1bdafdf684365ee2b9431fb702", "name" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df453700e8d81b1bdafdf684365ee2b9431fb702", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ] }, { "url" : "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92", "name" : "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b", "name" : "https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702", "name" : "https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "5.1.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-05T23:15Z", "lastModifiedDate" : "2019-07-19T12:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10639", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.1.8", "version_affected" : "=" }, { "version_value" : "4.1.9", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.1.11", "version_affected" : "=" }, { "version_value" : "4.1.12", "version_affected" : "=" }, { "version_value" : "4.1.13", "version_affected" : "=" }, { "version_value" : "4.1.14", "version_affected" : "=" }, { "version_value" : "4.1.15", "version_affected" : "=" }, { "version_value" : "4.1.16", "version_affected" : "=" }, { "version_value" : "4.1.17", "version_affected" : "=" }, { "version_value" : "4.1.18", "version_affected" : "=" }, { "version_value" : "4.1.19", "version_affected" : "=" }, { "version_value" : "4.1.20", "version_affected" : "=" }, { "version_value" : "4.1.21", "version_affected" : "=" }, { "version_value" : "4.1.22", "version_affected" : "=" }, { "version_value" : "4.1.23", "version_affected" : "=" }, { "version_value" : "4.1.24", "version_affected" : "=" }, { "version_value" : "4.1.25", "version_affected" : "=" }, { "version_value" : "4.1.26", "version_affected" : "=" }, { "version_value" : "4.1.27", "version_affected" : "=" }, { "version_value" : "4.1.28", "version_affected" : "=" }, { "version_value" : "4.1.29", "version_affected" : "=" }, { "version_value" : "4.1.30", "version_affected" : "=" }, { "version_value" : "4.1.31", "version_affected" : "=" }, { "version_value" : "4.1.32", "version_affected" : "=" }, { "version_value" : "4.1.33", "version_affected" : "=" }, { "version_value" : "4.1.34", "version_affected" : "=" }, { "version_value" : "4.1.35", "version_affected" : "=" }, { "version_value" : "4.1.36", "version_affected" : "=" }, { "version_value" : "4.1.37", "version_affected" : "=" }, { "version_value" : "4.1.38", "version_affected" : "=" }, { "version_value" : "4.1.39", "version_affected" : "=" }, { "version_value" : "4.1.40", "version_affected" : "=" }, { "version_value" : "4.1.41", "version_affected" : "=" }, { "version_value" : "4.1.42", "version_affected" : "=" }, { "version_value" : "4.1.43", "version_affected" : "=" }, { "version_value" : "4.1.44", "version_affected" : "=" }, { "version_value" : "4.1.45", "version_affected" : "=" }, { "version_value" : "4.1.46", "version_affected" : "=" }, { "version_value" : "4.1.47", "version_affected" : "=" }, { "version_value" : "4.1.48", "version_affected" : "=" }, { "version_value" : "4.1.49", "version_affected" : "=" }, { "version_value" : "4.1.50", "version_affected" : "=" }, { "version_value" : "4.1.51", "version_affected" : "=" }, { "version_value" : "4.1.52", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.2.4", "version_affected" : "=" }, { "version_value" : "4.2.5", "version_affected" : "=" }, { "version_value" : "4.2.6", "version_affected" : "=" }, { "version_value" : "4.2.7", "version_affected" : "=" }, { "version_value" : "4.2.8", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.4.4", "version_affected" : "=" }, { "version_value" : "4.4.5", "version_affected" : "=" }, { "version_value" : "4.4.6", "version_affected" : "=" }, { "version_value" : "4.4.7", "version_affected" : "=" }, { "version_value" : "4.4.8", "version_affected" : "=" }, { "version_value" : "4.4.9", "version_affected" : "=" }, { "version_value" : "4.4.10", "version_affected" : "=" }, { "version_value" : "4.4.11", "version_affected" : "=" }, { "version_value" : "4.4.12", "version_affected" : "=" }, { "version_value" : "4.4.13", "version_affected" : "=" }, { "version_value" : "4.4.14", "version_affected" : "=" }, { "version_value" : "4.4.15", "version_affected" : "=" }, { "version_value" : "4.4.16", "version_affected" : "=" }, { "version_value" : "4.4.17", "version_affected" : "=" }, { "version_value" : "4.4.18", "version_affected" : "=" }, { "version_value" : "4.4.19", "version_affected" : "=" }, { "version_value" : "4.4.20", "version_affected" : "=" }, { "version_value" : "4.4.21", "version_affected" : "=" }, { "version_value" : "4.4.22", "version_affected" : "=" }, { "version_value" : "4.4.23", "version_affected" : "=" }, { "version_value" : "4.4.24", "version_affected" : "=" }, { "version_value" : "4.4.25", "version_affected" : "=" }, { "version_value" : "4.4.26", "version_affected" : "=" }, { "version_value" : "4.4.27", "version_affected" : "=" }, { "version_value" : "4.4.28", "version_affected" : "=" }, { "version_value" : "4.4.29", "version_affected" : "=" }, { "version_value" : "4.4.30", "version_affected" : "=" }, { "version_value" : "4.4.31", "version_affected" : "=" }, { "version_value" : "4.4.32", "version_affected" : "=" }, { "version_value" : "4.4.33", "version_affected" : "=" }, { "version_value" : "4.4.34", "version_affected" : "=" }, { "version_value" : "4.4.35", "version_affected" : "=" }, { "version_value" : "4.4.36", "version_affected" : "=" }, { "version_value" : "4.4.37", "version_affected" : "=" }, { "version_value" : "4.4.38", "version_affected" : "=" }, { "version_value" : "4.4.39", "version_affected" : "=" }, { "version_value" : "4.4.40", "version_affected" : "=" }, { "version_value" : "4.4.41", "version_affected" : "=" }, { "version_value" : "4.4.42", "version_affected" : "=" }, { "version_value" : "4.4.43", "version_affected" : "=" }, { "version_value" : "4.4.44", "version_affected" : "=" }, { "version_value" : "4.4.45", "version_affected" : "=" }, { "version_value" : "4.4.46", "version_affected" : "=" }, { "version_value" : "4.4.47", "version_affected" : "=" }, { "version_value" : "4.4.48", "version_affected" : "=" }, { "version_value" : "4.4.49", "version_affected" : "=" }, { "version_value" : "4.4.50", "version_affected" : "=" }, { "version_value" : "4.4.51", "version_affected" : "=" }, { "version_value" : "4.4.52", "version_affected" : "=" }, { "version_value" : "4.4.53", "version_affected" : "=" }, { "version_value" : "4.4.54", "version_affected" : "=" }, { "version_value" : "4.4.55", "version_affected" : "=" }, { "version_value" : "4.4.56", "version_affected" : "=" }, { "version_value" : "4.4.57", "version_affected" : "=" }, { "version_value" : "4.4.58", "version_affected" : "=" }, { "version_value" : "4.4.59", "version_affected" : "=" }, { "version_value" : "4.4.60", "version_affected" : "=" }, { "version_value" : "4.4.61", "version_affected" : "=" }, { "version_value" : "4.4.62", "version_affected" : "=" }, { "version_value" : "4.4.63", "version_affected" : "=" }, { "version_value" : "4.4.64", "version_affected" : "=" }, { "version_value" : "4.4.65", "version_affected" : "=" }, { "version_value" : "4.4.66", "version_affected" : "=" }, { "version_value" : "4.4.67", "version_affected" : "=" }, { "version_value" : "4.4.68", "version_affected" : "=" }, { "version_value" : "4.4.69", "version_affected" : "=" }, { "version_value" : "4.4.70", "version_affected" : "=" }, { "version_value" : "4.4.71", "version_affected" : "=" }, { "version_value" : "4.4.72", "version_affected" : "=" }, { "version_value" : "4.4.73", "version_affected" : "=" }, { "version_value" : "4.4.74", "version_affected" : "=" }, { "version_value" : "4.4.75", "version_affected" : "=" }, { "version_value" : "4.4.76", "version_affected" : "=" }, { "version_value" : "4.4.77", "version_affected" : "=" }, { "version_value" : "4.4.78", "version_affected" : "=" }, { "version_value" : "4.4.79", "version_affected" : "=" }, { "version_value" : "4.4.80", "version_affected" : "=" }, { "version_value" : "4.4.81", "version_affected" : "=" }, { "version_value" : "4.4.82", "version_affected" : "=" }, { "version_value" : "4.4.83", "version_affected" : "=" }, { "version_value" : "4.4.84", "version_affected" : "=" }, { "version_value" : "4.4.85", "version_affected" : "=" }, { "version_value" : "4.4.86", "version_affected" : "=" }, { "version_value" : "4.4.87", "version_affected" : "=" }, { "version_value" : "4.4.88", "version_affected" : "=" }, { "version_value" : "4.4.89", "version_affected" : "=" }, { "version_value" : "4.4.90", "version_affected" : "=" }, { "version_value" : "4.4.91", "version_affected" : "=" }, { "version_value" : "4.4.92", "version_affected" : "=" }, { "version_value" : "4.4.93", "version_affected" : "=" }, { "version_value" : "4.4.94", "version_affected" : "=" }, { "version_value" : "4.4.95", "version_affected" : "=" }, { "version_value" : "4.4.96", "version_affected" : "=" }, { "version_value" : "4.4.97", "version_affected" : "=" }, { "version_value" : "4.4.98", "version_affected" : "=" }, { "version_value" : "4.4.99", "version_affected" : "=" }, { "version_value" : "4.4.100", "version_affected" : "=" }, { "version_value" : "4.4.101", "version_affected" : "=" }, { "version_value" : "4.4.102", "version_affected" : "=" }, { "version_value" : "4.4.103", "version_affected" : "=" }, { "version_value" : "4.4.104", "version_affected" : "=" }, { "version_value" : "4.4.105", "version_affected" : "=" }, { "version_value" : "4.4.106", "version_affected" : "=" }, { "version_value" : "4.4.107", "version_affected" : "=" }, { "version_value" : "4.4.108", "version_affected" : "=" }, { "version_value" : "4.4.109", "version_affected" : "=" }, { "version_value" : "4.4.110", "version_affected" : "=" }, { "version_value" : "4.4.111", "version_affected" : "=" }, { "version_value" : "4.4.112", "version_affected" : "=" }, { "version_value" : "4.4.113", "version_affected" : "=" }, { "version_value" : "4.4.114", "version_affected" : "=" }, { "version_value" : "4.4.115", "version_affected" : "=" }, { "version_value" : "4.4.116", "version_affected" : "=" }, { "version_value" : "4.4.117", "version_affected" : "=" }, { "version_value" : "4.4.118", "version_affected" : "=" }, { "version_value" : "4.4.119", "version_affected" : "=" }, { "version_value" : "4.4.120", "version_affected" : "=" }, { "version_value" : "4.4.121", "version_affected" : "=" }, { "version_value" : "4.4.122", "version_affected" : "=" }, { "version_value" : "4.4.123", "version_affected" : "=" }, { "version_value" : "4.4.124", "version_affected" : "=" }, { "version_value" : "4.4.125", "version_affected" : "=" }, { "version_value" : "4.4.126", "version_affected" : "=" }, { "version_value" : "4.4.127", "version_affected" : "=" }, { "version_value" : "4.4.128", "version_affected" : "=" }, { "version_value" : "4.4.129", "version_affected" : "=" }, { "version_value" : "4.4.130", "version_affected" : "=" }, { "version_value" : "4.4.131", "version_affected" : "=" }, { "version_value" : "4.4.132", "version_affected" : "=" }, { "version_value" : "4.4.133", "version_affected" : "=" }, { "version_value" : "4.4.134", "version_affected" : "=" }, { "version_value" : "4.4.135", "version_affected" : "=" }, { "version_value" : "4.4.136", "version_affected" : "=" }, { "version_value" : "4.4.137", "version_affected" : "=" }, { "version_value" : "4.4.138", "version_affected" : "=" }, { "version_value" : "4.4.139", "version_affected" : "=" }, { "version_value" : "4.4.140", "version_affected" : "=" }, { "version_value" : "4.4.141", "version_affected" : "=" }, { "version_value" : "4.4.142", "version_affected" : "=" }, { "version_value" : "4.4.143", "version_affected" : "=" }, { "version_value" : "4.4.144", "version_affected" : "=" }, { "version_value" : "4.4.145", "version_affected" : "=" }, { "version_value" : "4.4.146", "version_affected" : "=" }, { "version_value" : "4.4.147", "version_affected" : "=" }, { "version_value" : "4.4.148", "version_affected" : "=" }, { "version_value" : "4.4.149", "version_affected" : "=" }, { "version_value" : "4.4.150", "version_affected" : "=" }, { "version_value" : "4.4.151", "version_affected" : "=" }, { "version_value" : "4.4.152", "version_affected" : "=" }, { "version_value" : "4.4.153", "version_affected" : "=" }, { "version_value" : "4.4.154", "version_affected" : "=" }, { "version_value" : "4.4.155", "version_affected" : "=" }, { "version_value" : "4.4.156", "version_affected" : "=" }, { "version_value" : "4.4.157", "version_affected" : "=" }, { "version_value" : "4.4.158", "version_affected" : "=" }, { "version_value" : "4.4.159", "version_affected" : "=" }, { "version_value" : "4.4.160", "version_affected" : "=" }, { "version_value" : "4.4.161", "version_affected" : "=" }, { "version_value" : "4.4.162", "version_affected" : "=" }, { "version_value" : "4.4.163", "version_affected" : "=" }, { "version_value" : "4.4.164", "version_affected" : "=" }, { "version_value" : "4.4.165", "version_affected" : "=" }, { "version_value" : "4.4.166", "version_affected" : "=" }, { "version_value" : "4.4.167", "version_affected" : "=" }, { "version_value" : "4.4.168", "version_affected" : "=" }, { "version_value" : "4.4.169", "version_affected" : "=" }, { "version_value" : "4.4.170", "version_affected" : "=" }, { "version_value" : "4.4.171", "version_affected" : "=" }, { "version_value" : "4.4.172", "version_affected" : "=" }, { "version_value" : "4.4.173", "version_affected" : "=" }, { "version_value" : "4.4.174", "version_affected" : "=" }, { "version_value" : "4.4.175", "version_affected" : "=" }, { "version_value" : "4.4.176", "version_affected" : "=" }, { "version_value" : "4.4.177", "version_affected" : "=" }, { "version_value" : "4.4.178", "version_affected" : "=" }, { "version_value" : "4.4.179", "version_affected" : "=" }, { "version_value" : "4.4.180", "version_affected" : "=" }, { "version_value" : "4.4.181", "version_affected" : "=" }, { "version_value" : "4.4.182", "version_affected" : "=" }, { "version_value" : "4.4.183", "version_affected" : "=" }, { "version_value" : "4.4.184", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.5.3", "version_affected" : "=" }, { "version_value" : "4.5.4", "version_affected" : "=" }, { "version_value" : "4.5.5", "version_affected" : "=" }, { "version_value" : "4.5.6", "version_affected" : "=" }, { "version_value" : "4.5.7", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.8.1", "version_affected" : "=" }, { "version_value" : "4.8.2", "version_affected" : "=" }, { "version_value" : "4.8.3", "version_affected" : "=" }, { "version_value" : "4.8.4", "version_affected" : "=" }, { "version_value" : "4.8.5", "version_affected" : "=" }, { "version_value" : "4.8.6", "version_affected" : "=" }, { "version_value" : "4.8.7", "version_affected" : "=" }, { "version_value" : "4.8.8", "version_affected" : "=" }, { "version_value" : "4.8.9", "version_affected" : "=" }, { "version_value" : "4.8.10", "version_affected" : "=" }, { "version_value" : "4.8.11", "version_affected" : "=" }, { "version_value" : "4.8.12", "version_affected" : "=" }, { "version_value" : "4.8.13", "version_affected" : "=" }, { "version_value" : "4.8.14", "version_affected" : "=" }, { "version_value" : "4.8.15", "version_affected" : "=" }, { "version_value" : "4.8.16", "version_affected" : "=" }, { "version_value" : "4.8.17", "version_affected" : "=" }, { "version_value" : "4.9", "version_affected" : "=" }, { "version_value" : "4.9.1", "version_affected" : "=" }, { "version_value" : "4.9.2", "version_affected" : "=" }, { "version_value" : "4.9.3", "version_affected" : "=" }, { "version_value" : "4.9.4", "version_affected" : "=" }, { "version_value" : "4.9.5", "version_affected" : "=" }, { "version_value" : "4.9.6", "version_affected" : "=" }, { "version_value" : "4.9.7", "version_affected" : "=" }, { "version_value" : "4.9.8", "version_affected" : "=" }, { "version_value" : "4.9.9", "version_affected" : "=" }, { "version_value" : "4.9.10", "version_affected" : "=" }, { "version_value" : "4.9.11", "version_affected" : "=" }, { "version_value" : "4.9.12", "version_affected" : "=" }, { "version_value" : "4.9.13", "version_affected" : "=" }, { "version_value" : "4.9.14", "version_affected" : "=" }, { "version_value" : "4.9.15", "version_affected" : "=" }, { "version_value" : "4.9.16", "version_affected" : "=" }, { "version_value" : "4.9.17", "version_affected" : "=" }, { "version_value" : "4.9.18", "version_affected" : "=" }, { "version_value" : "4.9.19", "version_affected" : "=" }, { "version_value" : "4.9.20", "version_affected" : "=" }, { "version_value" : "4.9.21", "version_affected" : "=" }, { "version_value" : "4.9.22", "version_affected" : "=" }, { "version_value" : "4.9.23", "version_affected" : "=" }, { "version_value" : "4.9.24", "version_affected" : "=" }, { "version_value" : "4.9.25", "version_affected" : "=" }, { "version_value" : "4.9.26", "version_affected" : "=" }, { "version_value" : "4.9.27", "version_affected" : "=" }, { "version_value" : "4.9.28", "version_affected" : "=" }, { "version_value" : "4.9.29", "version_affected" : "=" }, { "version_value" : "4.9.30", "version_affected" : "=" }, { "version_value" : "4.9.31", "version_affected" : "=" }, { "version_value" : "4.9.32", "version_affected" : "=" }, { "version_value" : "4.9.33", "version_affected" : "=" }, { "version_value" : "4.9.34", "version_affected" : "=" }, { "version_value" : "4.9.35", "version_affected" : "=" }, { "version_value" : "4.9.36", "version_affected" : "=" }, { "version_value" : "4.9.37", "version_affected" : "=" }, { "version_value" : "4.9.38", "version_affected" : "=" }, { "version_value" : "4.9.39", "version_affected" : "=" }, { "version_value" : "4.9.40", "version_affected" : "=" }, { "version_value" : "4.9.41", "version_affected" : "=" }, { "version_value" : "4.9.42", "version_affected" : "=" }, { "version_value" : "4.9.43", "version_affected" : "=" }, { "version_value" : "4.9.44", "version_affected" : "=" }, { "version_value" : "4.9.45", "version_affected" : "=" }, { "version_value" : "4.9.46", "version_affected" : "=" }, { "version_value" : "4.9.47", "version_affected" : "=" }, { "version_value" : "4.9.48", "version_affected" : "=" }, { "version_value" : "4.9.49", "version_affected" : "=" }, { "version_value" : "4.9.50", "version_affected" : "=" }, { "version_value" : "4.9.51", "version_affected" : "=" }, { "version_value" : "4.9.52", "version_affected" : "=" }, { "version_value" : "4.9.53", "version_affected" : "=" }, { "version_value" : "4.9.54", "version_affected" : "=" }, { "version_value" : "4.9.55", "version_affected" : "=" }, { "version_value" : "4.9.56", "version_affected" : "=" }, { "version_value" : "4.9.57", "version_affected" : "=" }, { "version_value" : "4.9.58", "version_affected" : "=" }, { "version_value" : "4.9.59", "version_affected" : "=" }, { "version_value" : "4.9.60", "version_affected" : "=" }, { "version_value" : "4.9.61", "version_affected" : "=" }, { "version_value" : "4.9.62", "version_affected" : "=" }, { "version_value" : "4.9.63", "version_affected" : "=" }, { "version_value" : "4.9.64", "version_affected" : "=" }, { "version_value" : "4.9.65", "version_affected" : "=" }, { "version_value" : "4.9.66", "version_affected" : "=" }, { "version_value" : "4.9.67", "version_affected" : "=" }, { "version_value" : "4.9.68", "version_affected" : "=" }, { "version_value" : "4.9.69", "version_affected" : "=" }, { "version_value" : "4.9.70", "version_affected" : "=" }, { "version_value" : "4.9.71", "version_affected" : "=" }, { "version_value" : "4.9.72", "version_affected" : "=" }, { "version_value" : "4.9.73", "version_affected" : "=" }, { "version_value" : "4.9.74", "version_affected" : "=" }, { "version_value" : "4.9.75", "version_affected" : "=" }, { "version_value" : "4.9.76", "version_affected" : "=" }, { "version_value" : "4.9.77", "version_affected" : "=" }, { "version_value" : "4.9.78", "version_affected" : "=" }, { "version_value" : "4.9.79", "version_affected" : "=" }, { "version_value" : "4.9.80", "version_affected" : "=" }, { "version_value" : "4.9.81", "version_affected" : "=" }, { "version_value" : "4.9.82", "version_affected" : "=" }, { "version_value" : "4.9.83", "version_affected" : "=" }, { "version_value" : "4.9.84", "version_affected" : "=" }, { "version_value" : "4.9.85", "version_affected" : "=" }, { "version_value" : "4.9.86", "version_affected" : "=" }, { "version_value" : "4.9.87", "version_affected" : "=" }, { "version_value" : "4.9.88", "version_affected" : "=" }, { "version_value" : "4.9.89", "version_affected" : "=" }, { "version_value" : "4.9.90", "version_affected" : "=" }, { "version_value" : "4.9.91", "version_affected" : "=" }, { "version_value" : "4.9.92", "version_affected" : "=" }, { "version_value" : "4.9.93", "version_affected" : "=" }, { "version_value" : "4.9.94", "version_affected" : "=" }, { "version_value" : "4.9.95", "version_affected" : "=" }, { "version_value" : "4.9.96", "version_affected" : "=" }, { "version_value" : "4.9.97", "version_affected" : "=" }, { "version_value" : "4.9.98", "version_affected" : "=" }, { "version_value" : "4.9.99", "version_affected" : "=" }, { "version_value" : "4.9.100", "version_affected" : "=" }, { "version_value" : "4.9.101", "version_affected" : "=" }, { "version_value" : "4.9.102", "version_affected" : "=" }, { "version_value" : "4.9.103", "version_affected" : "=" }, { "version_value" : "4.9.104", "version_affected" : "=" }, { "version_value" : "4.9.105", "version_affected" : "=" }, { "version_value" : "4.9.106", "version_affected" : "=" }, { "version_value" : "4.9.107", "version_affected" : "=" }, { "version_value" : "4.9.108", "version_affected" : "=" }, { "version_value" : "4.9.109", "version_affected" : "=" }, { "version_value" : "4.9.110", "version_affected" : "=" }, { "version_value" : "4.9.111", "version_affected" : "=" }, { "version_value" : "4.9.112", "version_affected" : "=" }, { "version_value" : "4.9.113", "version_affected" : "=" }, { "version_value" : "4.9.114", "version_affected" : "=" }, { "version_value" : "4.9.115", "version_affected" : "=" }, { "version_value" : "4.9.116", "version_affected" : "=" }, { "version_value" : "4.9.117", "version_affected" : "=" }, { "version_value" : "4.9.118", "version_affected" : "=" }, { "version_value" : "4.9.119", "version_affected" : "=" }, { "version_value" : "4.9.120", "version_affected" : "=" }, { "version_value" : "4.9.121", "version_affected" : "=" }, { "version_value" : "4.9.122", "version_affected" : "=" }, { "version_value" : "4.9.123", "version_affected" : "=" }, { "version_value" : "4.9.124", "version_affected" : "=" }, { "version_value" : "4.9.125", "version_affected" : "=" }, { "version_value" : "4.9.126", "version_affected" : "=" }, { "version_value" : "4.9.127", "version_affected" : "=" }, { "version_value" : "4.9.128", "version_affected" : "=" }, { "version_value" : "4.9.129", "version_affected" : "=" }, { "version_value" : "4.9.130", "version_affected" : "=" }, { "version_value" : "4.9.131", "version_affected" : "=" }, { "version_value" : "4.9.132", "version_affected" : "=" }, { "version_value" : "4.9.133", "version_affected" : "=" }, { "version_value" : "4.9.134", "version_affected" : "=" }, { "version_value" : "4.9.135", "version_affected" : "=" }, { "version_value" : "4.9.136", "version_affected" : "=" }, { "version_value" : "4.9.137", "version_affected" : "=" }, { "version_value" : "4.9.138", "version_affected" : "=" }, { "version_value" : "4.9.139", "version_affected" : "=" }, { "version_value" : "4.9.140", "version_affected" : "=" }, { "version_value" : "4.9.141", "version_affected" : "=" }, { "version_value" : "4.9.142", "version_affected" : "=" }, { "version_value" : "4.9.143", "version_affected" : "=" }, { "version_value" : "4.9.144", "version_affected" : "=" }, { "version_value" : "4.9.145", "version_affected" : "=" }, { "version_value" : "4.9.146", "version_affected" : "=" }, { "version_value" : "4.9.147", "version_affected" : "=" }, { "version_value" : "4.9.148", "version_affected" : "=" }, { "version_value" : "4.9.149", "version_affected" : "=" }, { "version_value" : "4.9.150", "version_affected" : "=" }, { "version_value" : "4.9.151", "version_affected" : "=" }, { "version_value" : "4.9.152", "version_affected" : "=" }, { "version_value" : "4.9.153", "version_affected" : "=" }, { "version_value" : "4.9.154", "version_affected" : "=" }, { "version_value" : "4.9.155", "version_affected" : "=" }, { "version_value" : "4.9.156", "version_affected" : "=" }, { "version_value" : "4.9.157", "version_affected" : "=" }, { "version_value" : "4.9.158", "version_affected" : "=" }, { "version_value" : "4.9.159", "version_affected" : "=" }, { "version_value" : "4.9.160", "version_affected" : "=" }, { "version_value" : "4.9.161", "version_affected" : "=" }, { "version_value" : "4.9.162", "version_affected" : "=" }, { "version_value" : "4.9.163", "version_affected" : "=" }, { "version_value" : "4.9.164", "version_affected" : "=" }, { "version_value" : "4.9.165", "version_affected" : "=" }, { "version_value" : "4.9.166", "version_affected" : "=" }, { "version_value" : "4.9.167", "version_affected" : "=" }, { "version_value" : "4.9.168", "version_affected" : "=" }, { "version_value" : "4.9.169", "version_affected" : "=" }, { "version_value" : "4.9.170", "version_affected" : "=" }, { "version_value" : "4.9.171", "version_affected" : "=" }, { "version_value" : "4.9.172", "version_affected" : "=" }, { "version_value" : "4.9.173", "version_affected" : "=" }, { "version_value" : "4.9.174", "version_affected" : "=" }, { "version_value" : "4.9.175", "version_affected" : "=" }, { "version_value" : "4.9.176", "version_affected" : "=" }, { "version_value" : "4.9.177", "version_affected" : "=" }, { "version_value" : "4.9.178", "version_affected" : "=" }, { "version_value" : "4.9.179", "version_affected" : "=" }, { "version_value" : "4.9.180", "version_affected" : "=" }, { "version_value" : "4.9.181", "version_affected" : "=" }, { "version_value" : "4.9.182", "version_affected" : "=" }, { "version_value" : "4.9.183", "version_affected" : "=" }, { "version_value" : "4.9.184", "version_affected" : "=" }, { "version_value" : "4.10", "version_affected" : "=" }, { "version_value" : "4.10.1", "version_affected" : "=" }, { "version_value" : "4.10.2", "version_affected" : "=" }, { "version_value" : "4.10.3", "version_affected" : "=" }, { "version_value" : "4.10.4", "version_affected" : "=" }, { "version_value" : "4.10.5", "version_affected" : "=" }, { "version_value" : "4.10.6", "version_affected" : "=" }, { "version_value" : "4.10.7", "version_affected" : "=" }, { "version_value" : "4.10.8", "version_affected" : "=" }, { "version_value" : "4.10.9", "version_affected" : "=" }, { "version_value" : "4.10.10", "version_affected" : "=" }, { "version_value" : "4.10.11", "version_affected" : "=" }, { "version_value" : "4.10.12", "version_affected" : "=" }, { "version_value" : "4.10.13", "version_affected" : "=" }, { "version_value" : "4.10.14", "version_affected" : "=" }, { "version_value" : "4.10.15", "version_affected" : "=" }, { "version_value" : "4.10.16", "version_affected" : "=" }, { "version_value" : "4.10.17", "version_affected" : "=" }, { "version_value" : "4.11", "version_affected" : "=" }, { "version_value" : "4.11.1", "version_affected" : "=" }, { "version_value" : "4.11.2", "version_affected" : "=" }, { "version_value" : "4.11.3", "version_affected" : "=" }, { "version_value" : "4.11.4", "version_affected" : "=" }, { "version_value" : "4.11.5", "version_affected" : "=" }, { "version_value" : "4.11.6", "version_affected" : "=" }, { "version_value" : "4.11.7", "version_affected" : "=" }, { "version_value" : "4.11.8", "version_affected" : "=" }, { "version_value" : "4.11.9", "version_affected" : "=" }, { "version_value" : "4.11.10", "version_affected" : "=" }, { "version_value" : "4.11.11", "version_affected" : "=" }, { "version_value" : "4.11.12", "version_affected" : "=" }, { "version_value" : "4.12", "version_affected" : "=" }, { "version_value" : "4.12.1", "version_affected" : "=" }, { "version_value" : "4.12.2", "version_affected" : "=" }, { "version_value" : "4.12.3", "version_affected" : "=" }, { "version_value" : "4.12.4", "version_affected" : "=" }, { "version_value" : "4.12.5", "version_affected" : "=" }, { "version_value" : "4.12.6", "version_affected" : "=" }, { "version_value" : "4.12.7", "version_affected" : "=" }, { "version_value" : "4.12.8", "version_affected" : "=" }, { "version_value" : "4.12.9", "version_affected" : "=" }, { "version_value" : "4.12.10", "version_affected" : "=" }, { "version_value" : "4.12.11", "version_affected" : "=" }, { "version_value" : "4.12.12", "version_affected" : "=" }, { "version_value" : "4.12.13", "version_affected" : "=" }, { "version_value" : "4.12.14", "version_affected" : "=" }, { "version_value" : "4.13", "version_affected" : "=" }, { "version_value" : "4.13.1", "version_affected" : "=" }, { "version_value" : "4.13.2", "version_affected" : "=" }, { "version_value" : "4.13.3", "version_affected" : "=" }, { "version_value" : "4.13.4", "version_affected" : "=" }, { "version_value" : "4.13.5", "version_affected" : "=" }, { "version_value" : "4.13.6", "version_affected" : "=" }, { "version_value" : "4.13.7", "version_affected" : "=" }, { "version_value" : "4.13.8", "version_affected" : "=" }, { "version_value" : "4.13.9", "version_affected" : "=" }, { "version_value" : "4.13.10", "version_affected" : "=" }, { "version_value" : "4.13.11", "version_affected" : "=" }, { "version_value" : "4.13.12", "version_affected" : "=" }, { "version_value" : "4.13.13", "version_affected" : "=" }, { "version_value" : "4.13.14", "version_affected" : "=" }, { "version_value" : "4.13.15", "version_affected" : "=" }, { "version_value" : "4.13.16", "version_affected" : "=" }, { "version_value" : "4.14", "version_affected" : "=" }, { "version_value" : "4.14.1", "version_affected" : "=" }, { "version_value" : "4.14.2", "version_affected" : "=" }, { "version_value" : "4.14.3", "version_affected" : "=" }, { "version_value" : "4.14.4", "version_affected" : "=" }, { "version_value" : "4.14.5", "version_affected" : "=" }, { "version_value" : "4.14.6", "version_affected" : "=" }, { "version_value" : "4.14.7", "version_affected" : "=" }, { "version_value" : "4.14.8", "version_affected" : "=" }, { "version_value" : "4.14.9", "version_affected" : "=" }, { "version_value" : "4.14.10", "version_affected" : "=" }, { "version_value" : "4.14.11", "version_affected" : "=" }, { "version_value" : "4.14.12", "version_affected" : "=" }, { "version_value" : "4.14.13", "version_affected" : "=" }, { "version_value" : "4.14.14", "version_affected" : "=" }, { "version_value" : "4.14.15", "version_affected" : "=" }, { "version_value" : "4.14.16", "version_affected" : "=" }, { "version_value" : "4.14.17", "version_affected" : "=" }, { "version_value" : "4.14.18", "version_affected" : "=" }, { "version_value" : "4.14.19", "version_affected" : "=" }, { "version_value" : "4.14.20", "version_affected" : "=" }, { "version_value" : "4.14.21", "version_affected" : "=" }, { "version_value" : "4.14.22", "version_affected" : "=" }, { "version_value" : "4.14.23", "version_affected" : "=" }, { "version_value" : "4.14.24", "version_affected" : "=" }, { "version_value" : "4.14.25", "version_affected" : "=" }, { "version_value" : "4.14.26", "version_affected" : "=" }, { "version_value" : "4.14.27", "version_affected" : "=" }, { "version_value" : "4.14.28", "version_affected" : "=" }, { "version_value" : "4.14.29", "version_affected" : "=" }, { "version_value" : "4.14.30", "version_affected" : "=" }, { "version_value" : "4.14.31", "version_affected" : "=" }, { "version_value" : "4.14.32", "version_affected" : "=" }, { "version_value" : "4.14.33", "version_affected" : "=" }, { "version_value" : "4.14.34", "version_affected" : "=" }, { "version_value" : "4.14.35", "version_affected" : "=" }, { "version_value" : "4.14.36", "version_affected" : "=" }, { "version_value" : "4.14.37", "version_affected" : "=" }, { "version_value" : "4.14.38", "version_affected" : "=" }, { "version_value" : "4.14.39", "version_affected" : "=" }, { "version_value" : "4.14.40", "version_affected" : "=" }, { "version_value" : "4.14.41", "version_affected" : "=" }, { "version_value" : "4.14.42", "version_affected" : "=" }, { "version_value" : "4.14.43", "version_affected" : "=" }, { "version_value" : "4.14.44", "version_affected" : "=" }, { "version_value" : "4.14.45", "version_affected" : "=" }, { "version_value" : "4.14.46", "version_affected" : "=" }, { "version_value" : "4.14.47", "version_affected" : "=" }, { "version_value" : "4.14.48", "version_affected" : "=" }, { "version_value" : "4.14.49", "version_affected" : "=" }, { "version_value" : "4.14.50", "version_affected" : "=" }, { "version_value" : "4.14.51", "version_affected" : "=" }, { "version_value" : "4.14.52", "version_affected" : "=" }, { "version_value" : "4.14.53", "version_affected" : "=" }, { "version_value" : "4.14.54", "version_affected" : "=" }, { "version_value" : "4.14.55", "version_affected" : "=" }, { "version_value" : "4.14.56", "version_affected" : "=" }, { "version_value" : "4.14.57", "version_affected" : "=" }, { "version_value" : "4.14.58", "version_affected" : "=" }, { "version_value" : "4.14.59", "version_affected" : "=" }, { "version_value" : "4.14.60", "version_affected" : "=" }, { "version_value" : "4.14.61", "version_affected" : "=" }, { "version_value" : "4.14.62", "version_affected" : "=" }, { "version_value" : "4.14.63", "version_affected" : "=" }, { "version_value" : "4.14.64", "version_affected" : "=" }, { "version_value" : "4.14.65", "version_affected" : "=" }, { "version_value" : "4.14.66", "version_affected" : "=" }, { "version_value" : "4.14.67", "version_affected" : "=" }, { "version_value" : "4.14.68", "version_affected" : "=" }, { "version_value" : "4.14.69", "version_affected" : "=" }, { "version_value" : "4.14.70", "version_affected" : "=" }, { "version_value" : "4.14.71", "version_affected" : "=" }, { "version_value" : "4.14.72", "version_affected" : "=" }, { "version_value" : "4.14.73", "version_affected" : "=" }, { "version_value" : "4.14.74", "version_affected" : "=" }, { "version_value" : "4.14.75", "version_affected" : "=" }, { "version_value" : "4.14.76", "version_affected" : "=" }, { "version_value" : "4.14.77", "version_affected" : "=" }, { "version_value" : "4.14.78", "version_affected" : "=" }, { "version_value" : "4.14.79", "version_affected" : "=" }, { "version_value" : "4.14.80", "version_affected" : "=" }, { "version_value" : "4.14.81", "version_affected" : "=" }, { "version_value" : "4.14.82", "version_affected" : "=" }, { "version_value" : "4.14.83", "version_affected" : "=" }, { "version_value" : "4.14.84", "version_affected" : "=" }, { "version_value" : "4.14.85", "version_affected" : "=" }, { "version_value" : "4.14.86", "version_affected" : "=" }, { "version_value" : "4.14.87", "version_affected" : "=" }, { "version_value" : "4.14.88", "version_affected" : "=" }, { "version_value" : "4.14.89", "version_affected" : "=" }, { "version_value" : "4.14.90", "version_affected" : "=" }, { "version_value" : "4.14.91", "version_affected" : "=" }, { "version_value" : "4.14.92", "version_affected" : "=" }, { "version_value" : "4.14.93", "version_affected" : "=" }, { "version_value" : "4.14.94", "version_affected" : "=" }, { "version_value" : "4.14.95", "version_affected" : "=" }, { "version_value" : "4.14.96", "version_affected" : "=" }, { "version_value" : "4.14.97", "version_affected" : "=" }, { "version_value" : "4.14.98", "version_affected" : "=" }, { "version_value" : "4.14.99", "version_affected" : "=" }, { "version_value" : "4.14.100", "version_affected" : "=" }, { "version_value" : "4.14.101", "version_affected" : "=" }, { "version_value" : "4.14.102", "version_affected" : "=" }, { "version_value" : "4.14.103", "version_affected" : "=" }, { "version_value" : "4.14.104", "version_affected" : "=" }, { "version_value" : "4.14.105", "version_affected" : "=" }, { "version_value" : "4.14.106", "version_affected" : "=" }, { "version_value" : "4.14.107", "version_affected" : "=" }, { "version_value" : "4.14.108", "version_affected" : "=" }, { "version_value" : "4.14.109", "version_affected" : "=" }, { "version_value" : "4.14.110", "version_affected" : "=" }, { "version_value" : "4.14.111", "version_affected" : "=" }, { "version_value" : "4.14.112", "version_affected" : "=" }, { "version_value" : "4.14.113", "version_affected" : "=" }, { "version_value" : "4.14.114", "version_affected" : "=" }, { "version_value" : "4.14.115", "version_affected" : "=" }, { "version_value" : "4.14.116", "version_affected" : "=" }, { "version_value" : "4.14.117", "version_affected" : "=" }, { "version_value" : "4.14.118", "version_affected" : "=" }, { "version_value" : "4.14.119", "version_affected" : "=" }, { "version_value" : "4.14.120", "version_affected" : "=" }, { "version_value" : "4.14.121", "version_affected" : "=" }, { "version_value" : "4.14.122", "version_affected" : "=" }, { "version_value" : "4.14.123", "version_affected" : "=" }, { "version_value" : "4.14.124", "version_affected" : "=" }, { "version_value" : "4.14.125", "version_affected" : "=" }, { "version_value" : "4.14.126", "version_affected" : "=" }, { "version_value" : "4.14.127", "version_affected" : "=" }, { "version_value" : "4.14.128", "version_affected" : "=" }, { "version_value" : "4.14.129", "version_affected" : "=" }, { "version_value" : "4.14.130", "version_affected" : "=" }, { "version_value" : "4.14.131", "version_affected" : "=" }, { "version_value" : "4.15", "version_affected" : "=" }, { "version_value" : "4.15.1", "version_affected" : "=" }, { "version_value" : "4.15.2", "version_affected" : "=" }, { "version_value" : "4.15.3", "version_affected" : "=" }, { "version_value" : "4.15.4", "version_affected" : "=" }, { "version_value" : "4.15.5", "version_affected" : "=" }, { "version_value" : "4.15.6", "version_affected" : "=" }, { "version_value" : "4.15.7", "version_affected" : "=" }, { "version_value" : "4.15.8", "version_affected" : "=" }, { "version_value" : "4.15.9", "version_affected" : "=" }, { "version_value" : "4.15.10", "version_affected" : "=" }, { "version_value" : "4.15.11", "version_affected" : "=" }, { "version_value" : "4.15.12", "version_affected" : "=" }, { "version_value" : "4.15.13", "version_affected" : "=" }, { "version_value" : "4.15.14", "version_affected" : "=" }, { "version_value" : "4.15.15", "version_affected" : "=" }, { "version_value" : "4.15.16", "version_affected" : "=" }, { "version_value" : "4.15.17", "version_affected" : "=" }, { "version_value" : "4.15.18", "version_affected" : "=" }, { "version_value" : "4.16", "version_affected" : "=" }, { "version_value" : "4.16.1", "version_affected" : "=" }, { "version_value" : "4.16.2", "version_affected" : "=" }, { "version_value" : "4.16.3", "version_affected" : "=" }, { "version_value" : "4.16.4", "version_affected" : "=" }, { "version_value" : "4.16.5", "version_affected" : "=" }, { "version_value" : "4.16.6", "version_affected" : "=" }, { "version_value" : "4.16.7", "version_affected" : "=" }, { "version_value" : "4.16.8", "version_affected" : "=" }, { "version_value" : "4.16.9", "version_affected" : "=" }, { "version_value" : "4.16.10", "version_affected" : "=" }, { "version_value" : "4.16.11", "version_affected" : "=" }, { "version_value" : "4.16.12", "version_affected" : "=" }, { "version_value" : "4.16.13", "version_affected" : "=" }, { "version_value" : "4.16.14", "version_affected" : "=" }, { "version_value" : "4.16.15", "version_affected" : "=" }, { "version_value" : "4.16.16", "version_affected" : "=" }, { "version_value" : "4.16.17", "version_affected" : "=" }, { "version_value" : "4.16.18", "version_affected" : "=" }, { "version_value" : "4.17", "version_affected" : "=" }, { "version_value" : "4.17.1", "version_affected" : "=" }, { "version_value" : "4.17.2", "version_affected" : "=" }, { "version_value" : "4.17.3", "version_affected" : "=" }, { "version_value" : "4.17.4", "version_affected" : "=" }, { "version_value" : "4.17.5", "version_affected" : "=" }, { "version_value" : "4.17.6", "version_affected" : "=" }, { "version_value" : "4.17.7", "version_affected" : "=" }, { "version_value" : "4.17.8", "version_affected" : "=" }, { "version_value" : "4.17.9", "version_affected" : "=" }, { "version_value" : "4.18", "version_affected" : "=" }, { "version_value" : "4.18.1", "version_affected" : "=" }, { "version_value" : "4.18.2", "version_affected" : "=" }, { "version_value" : "4.18.3", "version_affected" : "=" }, { "version_value" : "4.18.4", "version_affected" : "=" }, { "version_value" : "4.18.5", "version_affected" : "=" }, { "version_value" : "4.18.6", "version_affected" : "=" }, { "version_value" : "4.18.7", "version_affected" : "=" }, { "version_value" : "4.18.8", "version_affected" : "=" }, { "version_value" : "4.18.9", "version_affected" : "=" }, { "version_value" : "4.18.10", "version_affected" : "=" }, { "version_value" : "4.18.11", "version_affected" : "=" }, { "version_value" : "4.18.12", "version_affected" : "=" }, { "version_value" : "4.18.13", "version_affected" : "=" }, { "version_value" : "4.18.14", "version_affected" : "=" }, { "version_value" : "4.18.15", "version_affected" : "=" }, { "version_value" : "4.18.16", "version_affected" : "=" }, { "version_value" : "4.18.19", "version_affected" : "=" }, { "version_value" : "4.18.20", "version_affected" : "=" }, { "version_value" : "4.19", "version_affected" : "=" }, { "version_value" : "4.19.1", "version_affected" : "=" }, { "version_value" : "4.19.2", "version_affected" : "=" }, { "version_value" : "4.19.3", "version_affected" : "=" }, { "version_value" : "4.19.4", "version_affected" : "=" }, { "version_value" : "4.19.5", "version_affected" : "=" }, { "version_value" : "4.19.6", "version_affected" : "=" }, { "version_value" : "4.19.7", "version_affected" : "=" }, { "version_value" : "4.19.8", "version_affected" : "=" }, { "version_value" : "4.19.9", "version_affected" : "=" }, { "version_value" : "4.19.10", "version_affected" : "=" }, { "version_value" : "4.19.11", "version_affected" : "=" }, { "version_value" : "4.19.12", "version_affected" : "=" }, { "version_value" : "4.19.13", "version_affected" : "=" }, { "version_value" : "4.19.16", "version_affected" : "=" }, { "version_value" : "4.19.17", "version_affected" : "=" }, { "version_value" : "4.19.18", "version_affected" : "=" }, { "version_value" : "4.19.19", "version_affected" : "=" }, { "version_value" : "4.19.20", "version_affected" : "=" }, { "version_value" : "4.19.21", "version_affected" : "=" }, { "version_value" : "4.19.22", "version_affected" : "=" }, { "version_value" : "4.19.23", "version_affected" : "=" }, { "version_value" : "4.19.24", "version_affected" : "=" }, { "version_value" : "4.19.25", "version_affected" : "=" }, { "version_value" : "4.19.26", "version_affected" : "=" }, { "version_value" : "4.19.27", "version_affected" : "=" }, { "version_value" : "4.19.28", "version_affected" : "=" }, { "version_value" : "4.19.29", "version_affected" : "=" }, { "version_value" : "4.19.30", "version_affected" : "=" }, { "version_value" : "4.19.31", "version_affected" : "=" }, { "version_value" : "4.19.32", "version_affected" : "=" }, { "version_value" : "4.19.33", "version_affected" : "=" }, { "version_value" : "4.19.34", "version_affected" : "=" }, { "version_value" : "4.19.35", "version_affected" : "=" }, { "version_value" : "4.19.36", "version_affected" : "=" }, { "version_value" : "4.19.37", "version_affected" : "=" }, { "version_value" : "4.19.38", "version_affected" : "=" }, { "version_value" : "4.19.39", "version_affected" : "=" }, { "version_value" : "4.19.40", "version_affected" : "=" }, { "version_value" : "4.19.41", "version_affected" : "=" }, { "version_value" : "4.19.42", "version_affected" : "=" }, { "version_value" : "4.19.43", "version_affected" : "=" }, { "version_value" : "4.19.44", "version_affected" : "=" }, { "version_value" : "4.19.45", "version_affected" : "=" }, { "version_value" : "4.19.46", "version_affected" : "=" }, { "version_value" : "4.19.47", "version_affected" : "=" }, { "version_value" : "4.19.48", "version_affected" : "=" }, { "version_value" : "4.19.49", "version_affected" : "=" }, { "version_value" : "4.19.50", "version_affected" : "=" }, { "version_value" : "4.19.51", "version_affected" : "=" }, { "version_value" : "4.19.52", "version_affected" : "=" }, { "version_value" : "4.19.53", "version_affected" : "=" }, { "version_value" : "4.19.54", "version_affected" : "=" }, { "version_value" : "4.19.55", "version_affected" : "=" }, { "version_value" : "4.19.56", "version_affected" : "=" }, { "version_value" : "4.20", "version_affected" : "=" }, { "version_value" : "4.20.1", "version_affected" : "=" }, { "version_value" : "4.20.2", "version_affected" : "=" }, { "version_value" : "4.20.3", "version_affected" : "=" }, { "version_value" : "4.20.4", "version_affected" : "=" }, { "version_value" : "4.20.5", "version_affected" : "=" }, { "version_value" : "4.20.6", "version_affected" : "=" }, { "version_value" : "4.20.7", "version_affected" : "=" }, { "version_value" : "4.20.8", "version_affected" : "=" }, { "version_value" : "4.20.9", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.4", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html", "name" : "openSUSE-SU-2019:1716", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "https://arxiv.org/pdf/1906.10478.pdf", "name" : "https://arxiv.org/pdf/1906.10478.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8", "name" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8", "refsource" : "MISC", "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ] }, { "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92", "name" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ] }, { "url" : "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92", "name" : "https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure (partial kernel address disclosure), leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). This key contains enough bits from a kernel address (of a static variable) so when the key is extracted (via enumeration), the offset of the kernel image is exposed. This attack can be carried out remotely, by the attacker forcing the target device to send UDP or ICMP (or certain other) traffic to attacker-controlled IP addresses. Forcing a server to send UDP traffic is trivial if the server is a DNS server. ICMP traffic is trivial if the server answers ICMP Echo requests (ping). For client targets, if the target visits the attacker's web page, then WebRTC or gQUIC can be used to force UDP traffic to attacker-controlled IP addresses. NOTE: this attack against KASLR became viable in 4.1 because IP ID generation was changed to have a dependency on an address associated with a network namespace." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.1", "versionEndIncluding" : "4.20.9" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0", "versionEndExcluding" : "5.0.8" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T23:15Z", "lastModifiedDate" : "2019-07-19T12:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10651", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ivanti", "product" : { "product_data" : [ { "product_name" : "endpoint_manager", "version" : { "version_data" : [ { "version_value" : "2017.3", "version_affected" : "=" }, { "version_value" : "2018.1", "version_affected" : "=" }, { "version_value" : "2018.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019", "name" : "https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Endpoint-Manager-April-2019", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and 2018.x before 2018.3 SU3, with remote code execution. In other words, the issue affects 2017.3, 2018.1, and 2018.3 installations that lack the April 2019 update." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ivanti:endpoint_manager:2017.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ivanti:endpoint_manager:2018.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ivanti:endpoint_manager:2018.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T18:15Z", "lastModifiedDate" : "2019-07-18T17:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1067", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1067", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1067", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1068", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sql_server", "version" : { "version_data" : [ { "version_value" : "2014", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" }, { "version_value" : "2017", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sql_server:2016:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sql_server:2017:*:*:*:*:*:x64:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1071", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1071", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1071", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1072", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "team_foundation_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2012", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2015", "version_affected" : "=" }, { "version_value" : "2017", "version_affected" : "=" }, { "version_value" : "2018", "version_affected" : "=" } ] } }, { "product_name" : "azure_devops_server", "version" : { "version_data" : [ { "version_value" : "2019.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1072", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1072", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2012:4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2013:5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2015:4.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2017:3.1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2018:1.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1073", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1073", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1073", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1074", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1074", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1074", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic link attack. An attacker who successfully exploited this vulnerability could potentially access unauthorized information. The update addresses this vulnerability by not allowing symbolic links in these scenarios., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1082." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1075", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "asp.net_core", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-601" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1075", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net_core:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:asp.net_core:2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1076", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "team_foundation_server", "version" : { "version_data" : [ { "version_value" : "2018", "version_affected" : "=" } ] } }, { "product_name" : "azure_devops_server", "version" : { "version_data" : [ { "version_value" : "2019.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1076", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1076", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-18T13:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1077", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "visual_studio_2017", "version" : { "version_data" : [ { "version_value" : "15.9", "version_affected" : "=" } ] } }, { "product_name" : "visual_studio_2019", "version" : { "version_data" : [ { "version_value" : "16.0", "version_affected" : "=" }, { "version_value" : "16.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1077", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2019:16.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 5.0, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.3, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 9.2, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T13:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1079", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "visual_studio", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2012", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2015", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio:2012:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio:2013:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio:2015:update_3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1082", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1082", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1082", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this vulnerability by requiring SYSTEM privileges for a certain DLL., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1074." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1083", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1083", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1083", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1084", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1084", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1084", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-15T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1085", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1085", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1085", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T19:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1086", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1086", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1086", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1087, CVE-2019-1088." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1087", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1087", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1087", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1088." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1088", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1088", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1088", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1087." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1089", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153683/Microsoft-Windows-RPCSS-Activation-Kernel-Security-Callback-Privilege-Escalation.html", "name" : "http://packetstormsecurity.com/files/153683/Microsoft-Windows-RPCSS-Activation-Kernel-Security-Callback-Privilege-Escalation.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1089", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1089", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1090", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1090", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1090", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrlvr.dll Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1091", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1091", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1091", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10915", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109124", "name" : "109124", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-721298.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-11T22:15Z", "lastModifiedDate" : "2019-07-12T12:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1092", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1092", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1092", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1093", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1093", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1093", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1097." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T15:05Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10930", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "siemens", "product" : { "product_data" : [ { "product_name" : "digsi_5_engineering_software", "version" : { "version_data" : [ { "version_value" : "7.90", "version_affected" : "=" } ] } }, { "product_name" : "siprotec_5_digsi_device_driver", "version" : { "version_data" : [ { "version_value" : "7.90", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability has been identified in SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions), DIGSI 5 engineering software (All versions < V7.90). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:digsi_5_engineering_software:7.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:7.90:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T22:15Z", "lastModifiedDate" : "2019-07-19T13:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10931", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "siemens", "product" : { "product_data" : [ { "product_name" : "digsi_5_engineering_software", "version" : { "version_data" : [ { "version_value" : "7.90", "version_affected" : "=" } ] } }, { "product_name" : "siprotec_5_digsi_device_driver", "version" : { "version_data" : [ { "version_value" : "7.90", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-899560.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability has been identified in SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions), DIGSI 5 engineering software (All versions < V7.90). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:digsi_5_engineering_software:7.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:siprotec_5_digsi_device_driver:7.90:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:6md89:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sa87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sd87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sj86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sk82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sk85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7sl87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7um85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut82:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut86:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ut87:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7ve85:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:siemens:7vk87:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T22:15Z", "lastModifiedDate" : "2019-07-19T13:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10933", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "siemens", "product" : { "product_data" : [ { "product_name" : "spectrum_power_3", "version" : { "version_data" : [ { "version_value" : "3.11", "version_affected" : "<=" } ] } }, { "product_name" : "spectrum_power_4", "version" : { "version_data" : [ { "version_value" : "4.75", "version_affected" : "<=" } ] } }, { "product_name" : "spectrum_power_5", "version" : { "version_data" : [ { "version_value" : "5.50", "version_affected" : "<=" } ] } }, { "product_name" : "spectrum_power_7", "version" : { "version_data" : [ { "version_value" : "2.20", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-747162.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-747162.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate User Interface) (Version v4.75), Spectrum Power 5 (Corporate User Interface) (All versions <= v5.50), Spectrum Power 7 (Corporate User Interface) (All versions <= v2.20). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user does not need to be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:spectrum_power_3:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.11" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:spectrum_power_4:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.75" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:spectrum_power_5:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.50" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.20" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T22:15Z", "lastModifiedDate" : "2019-07-18T13:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10935", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "siemens", "product" : { "product_data" : [ { "product_name" : "simatic_pcs_7", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "simatic_wincc", "version" : { "version_data" : [ { "version_value" : "7.2", "version_affected" : "<=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "13", "version_affected" : "=" }, { "version_value" : "14", "version_affected" : "=" }, { "version_value" : "15", "version_affected" : "=" } ] } }, { "product_name" : "simatic_wincc_runtime", "version" : { "version_data" : [ { "version_value" : "13", "version_affected" : "=" }, { "version_value" : "14", "version_affected" : "=" }, { "version_value" : "15", "version_affected" : "=" }, { "version_value" : "15.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109127", "name" : "109127", "refsource" : "BID", "tags" : [ "Mitigation", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-121293.pdf", "name" : "https://cert-portal.siemens.com/productcert/pdf/ssa-121293.pdf", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://www.us-cert.gov/ics/advisories/icsa-19-192-02", "name" : "https://www.us-cert.gov/ics/advisories/icsa-19-192-02", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions), SIMATIC WinCC Professional (TIA Portal V15) (All versions), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions), SIMATIC WinCC Runtime Professional V15 (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_pcs_7:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_pcs_7:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_pcs_7:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_pcs_7:9.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*", "versionEndIncluding" : "7.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.3:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.4:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.4:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.4:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:13:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:13:sp2:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:14:*:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:14:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:14:sp1:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc:15:*:*:*:professional:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:*:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:sp1:update_2:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:sp1:update_9:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:13:sp2:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:14:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:14:sp1:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:15:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:15:update_4:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:15.1:-:*:*:professional:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:siemens:simatic_wincc_runtime:15.1:update_1:*:*:professional:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T22:15Z", "lastModifiedDate" : "2019-07-19T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1094", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1094", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1094", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T00:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1095", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1095", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T00:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1096", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1096", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1096", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:38Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10966", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ge", "product" : { "product_data" : [ { "product_name" : "aespire_7100_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "aespire_7900_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "aestiva_7100_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "aestiva_7900_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109102", "name" : "109102", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.us-cert.gov/ics/advisories/icsma-19-190-01", "name" : "https://www.us-cert.gov/ics/advisories/icsma-19-190-01", "refsource" : "MISC", "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added unsecured terminal server to a TCP/IP network configuration, which could allow an attacker to remotely modify device configuration and silence alarms." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ge:aestiva_7100_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ge:aestiva_7100:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ge:aestiva_7900_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ge:aestiva_7900:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ge:aespire_7100_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ge:aespire_7100:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ge:aespire_7900_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ge:aespire_7900:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T18:15Z", "lastModifiedDate" : "2019-07-18T17:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1097", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T15:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-10970", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109105", "name" : "109105", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.us-cert.gov/ics/advisories/icsa-19-190-02", "name" : "https://www.us-cert.gov/ics/advisories/icsa-19-190-02", "refsource" : "MISC", "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device?s file system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:rockwellautomation:panelview_5510_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.003" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:rockwellautomation:panelview_5510_firmware:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.000", "versionEndExcluding" : "5.002" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:rockwellautomation:panelview_5510:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-19T14:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1098", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1098", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1099", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1099", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1100", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1100", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T00:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1101", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1101", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1116." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:x64:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T14:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11019", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ddrt", "product" : { "product_data" : [ { "product_name" : "dashcam_live_firmware", "version" : { "version_data" : [ { "version_value" : "2019-05-08", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ddrt.co.uk/complaint-handling-software/", "name" : "http://ddrt.co.uk/complaint-handling-software/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://domdomegg.github.io/CVE-2019-11019.pdf", "name" : "https://domdomegg.github.io/CVE-2019-11019.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/all_claim_detail.php?claim_id= URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ddrt:dashcam_live_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2019-05-08" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ddrt:dashcam_live:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T16:15Z", "lastModifiedDate" : "2019-07-16T18:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1102", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1102", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11020", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ddrt", "product" : { "product_data" : [ { "product_name" : "dashcam_live_firmware", "version" : { "version_data" : [ { "version_value" : "2019-05-09", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ddrt.co.uk/complaint-handling-software/", "name" : "http://ddrt.co.uk/complaint-handling-software/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://domdomegg.github.io/CVE-2019-11020.pdf", "name" : "https://domdomegg.github.io/CVE-2019-11020.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claim_files/claim_id_ URLs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ddrt:dashcam_live_firmware:2019-05-09:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ddrt:dashcam_live:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T17:15Z", "lastModifiedDate" : "2019-07-16T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1103", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1103", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1106, CVE-2019-1107." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1104", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1104", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1106", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1106", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11062", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun.net", "product" : { "product_data" : [ { "product_name" : "wmpro", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://surl.twcert.org.tw/hLFFM", "name" : "http://surl.twcert.org.tw/hLFFM", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://gist.github.com/tonykuo76/476164af9bc672281b9a3394f01c17f0", "name" : "https://gist.github.com/tonykuo76/476164af9bc672281b9a3394f01c17f0", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://tvn.twcert.org.tw/taiwanvn/TVN-201906001", "name" : "https://tvn.twcert.org.tw/taiwanvn/TVN-201906001", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via \"/teach/course/doajaxfileupload.php\". The target server can be exploited without authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun.net:wmpro:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun.net:wmpro:5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-15T18:05Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1107", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "chakracore", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.0.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.6", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.11.3", "version_affected" : "=" }, { "version_value" : "1.11.4", "version_affected" : "=" }, { "version_value" : "1.11.5", "version_affected" : "=" }, { "version_value" : "1.11.6", "version_affected" : "=" }, { "version_value" : "1.11.7", "version_affected" : "=" }, { "version_value" : "1.11.8", "version_affected" : "=" }, { "version_value" : "1.11.9", "version_affected" : "=" }, { "version_value" : "1.11.10", "version_affected" : "=" } ] } }, { "product_name" : "edge", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1107", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1106." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:chakracore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.11.11" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1108", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1108", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1109", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" }, { "version_value" : "2019", "version_affected" : "=" } ] } }, { "product_name" : "office_365", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1109", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_365:-:*:*:*:proplus:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 9.1, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1110", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2016", "version_affected" : "=" }, { "version_value" : "2019", "version_affected" : "=" } ] } }, { "product_name" : "office_365_proplus", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1110", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1111." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1111", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" }, { "version_value" : "2019", "version_affected" : "=" } ] } }, { "product_name" : "office_365_proplus", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1111", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2013:*:*:*:rt:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1112", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2019", "version_affected" : "=" } ] } }, { "product_name" : "office_365_proplus", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1112", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1113", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : ".net_framework", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "4.5.2", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" } ] } }, { "product_name" : "visual_studio_2017", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "15.9", "version_affected" : "=" }, { "version_value" : "16.0", "version_affected" : "=" }, { "version_value" : "16.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1113", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework Remote Code Execution Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp2:*:*:*:*:x64:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2017:16.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visual_studio_2017:16.1:*:*:*:*:*:*:*" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11133", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109096", "name" : "109096", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00268.html", "name" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00268.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:intel:processor_diagnostic_tool:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.1.2.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-18T13:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1116", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1116", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T16:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1117", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1117", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1118", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1118", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T02:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1119", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1119", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1120", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1120", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1121", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1121", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1122", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1123", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1123", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1124, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11230", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mcerlane.co.uk/CVE-2019-11230/", "name" : "http://www.mcerlane.co.uk/CVE-2019-11230/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename a critical product file (e.g., AvastSvc.exe), causing the product to fail to start on the next system restart." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1124", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1124", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1127, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11242", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-295" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/cohesity/SecAdvisory/blob/master/README.md", "name" : "https://github.com/cohesity/SecAdvisory/blob/master/README.md", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity clusters did not verify TLS certificates presented by vCenter. This vulnerability could expose Cohesity user credentials configured to access vCenter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cohesity:dataplatform:*:*:*:*:*:*:*:*", "versionStartIncluding" : "5.0", "versionEndExcluding" : "6.1.1c" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-12T20:15Z", "lastModifiedDate" : "2019-07-17T18:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1126", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1126", "name" : "N/A", "refsource" : "N/A", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.This security update corrects how ADFS handles external authentication requests., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0975." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-15T19:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11268", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pivotal_software", "product" : { "product_data" : [ { "product_name" : "cloud_foundry_uaa-release", "version" : { "version_data" : [ { "version_value" : "2", "version_affected" : "=" }, { "version_value" : "3", "version_affected" : "=" }, { "version_value" : "4", "version_affected" : "=" }, { "version_value" : "5", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "11.2", "version_affected" : "=" }, { "version_value" : "11.3", "version_affected" : "=" }, { "version_value" : "11.4", "version_affected" : "=" }, { "version_value" : "11.5", "version_affected" : "=" }, { "version_value" : "11.7", "version_affected" : "=" }, { "version_value" : "12", "version_affected" : "=" }, { "version_value" : "12.1", "version_affected" : "=" }, { "version_value" : "12.2", "version_affected" : "=" }, { "version_value" : "12.3", "version_affected" : "=" }, { "version_value" : "12.4", "version_affected" : "=" }, { "version_value" : "12.5", "version_affected" : "=" }, { "version_value" : "12.6", "version_affected" : "=" }, { "version_value" : "13", "version_affected" : "=" }, { "version_value" : "13.1", "version_affected" : "=" }, { "version_value" : "13.2", "version_affected" : "=" }, { "version_value" : "13.3", "version_affected" : "=" }, { "version_value" : "13.4", "version_affected" : "=" }, { "version_value" : "13.5", "version_affected" : "=" }, { "version_value" : "13.6", "version_affected" : "=" }, { "version_value" : "13.7", "version_affected" : "=" }, { "version_value" : "13.8", "version_affected" : "=" }, { "version_value" : "13.9", "version_affected" : "=" }, { "version_value" : "13.10", "version_affected" : "=" }, { "version_value" : "13.11", "version_affected" : "=" }, { "version_value" : "13.12", "version_affected" : "=" }, { "version_value" : "13.13", "version_affected" : "=" }, { "version_value" : "13.14", "version_affected" : "=" }, { "version_value" : "13.15", "version_affected" : "=" }, { "version_value" : "13.16", "version_affected" : "=" }, { "version_value" : "13.17", "version_affected" : "=" }, { "version_value" : "13.18", "version_affected" : "=" }, { "version_value" : "14", "version_affected" : "=" }, { "version_value" : "15", "version_affected" : "=" }, { "version_value" : "16", "version_affected" : "=" }, { "version_value" : "17", "version_affected" : "=" }, { "version_value" : "18", "version_affected" : "=" }, { "version_value" : "19", "version_affected" : "=" }, { "version_value" : "20", "version_affected" : "=" }, { "version_value" : "21", "version_affected" : "=" }, { "version_value" : "22", "version_affected" : "=" }, { "version_value" : "23", "version_affected" : "=" }, { "version_value" : "24", "version_affected" : "=" }, { "version_value" : "24.1", "version_affected" : "=" }, { "version_value" : "24.2", "version_affected" : "=" }, { "version_value" : "24.3", "version_affected" : "=" }, { "version_value" : "24.4", "version_affected" : "=" }, { "version_value" : "24.5", "version_affected" : "=" }, { "version_value" : "24.6", "version_affected" : "=" }, { "version_value" : "24.7", "version_affected" : "=" }, { "version_value" : "24.8", "version_affected" : "=" }, { "version_value" : "24.9", "version_affected" : "=" }, { "version_value" : "24.10", "version_affected" : "=" }, { "version_value" : "24.11", "version_affected" : "=" }, { "version_value" : "24.12", "version_affected" : "=" }, { "version_value" : "24.13", "version_affected" : "=" }, { "version_value" : "24.14", "version_affected" : "=" }, { "version_value" : "25", "version_affected" : "=" }, { "version_value" : "26", "version_affected" : "=" }, { "version_value" : "27", "version_affected" : "=" }, { "version_value" : "28", "version_affected" : "=" }, { "version_value" : "29", "version_affected" : "=" }, { "version_value" : "30", "version_affected" : "=" }, { "version_value" : "30.1", "version_affected" : "=" }, { "version_value" : "30.2", "version_affected" : "=" }, { "version_value" : "30.3", "version_affected" : "=" }, { "version_value" : "30.4", "version_affected" : "=" }, { "version_value" : "30.5", "version_affected" : "=" }, { "version_value" : "30.6", "version_affected" : "=" }, { "version_value" : "30.7", "version_affected" : "=" }, { "version_value" : "30.8", "version_affected" : "=" }, { "version_value" : "30.9", "version_affected" : "=" }, { "version_value" : "31", "version_affected" : "=" }, { "version_value" : "32", "version_affected" : "=" }, { "version_value" : "33", "version_affected" : "=" }, { "version_value" : "34", "version_affected" : "=" }, { "version_value" : "34.1", "version_affected" : "=" }, { "version_value" : "34.2", "version_affected" : "=" }, { "version_value" : "34.3", "version_affected" : "=" }, { "version_value" : "35", "version_affected" : "=" }, { "version_value" : "36", "version_affected" : "=" }, { "version_value" : "37", "version_affected" : "=" }, { "version_value" : "38", "version_affected" : "=" }, { "version_value" : "39", "version_affected" : "=" }, { "version_value" : "40", "version_affected" : "=" }, { "version_value" : "41", "version_affected" : "=" }, { "version_value" : "41.1", "version_affected" : "=" }, { "version_value" : "43", "version_affected" : "=" }, { "version_value" : "44", "version_affected" : "=" }, { "version_value" : "45", "version_affected" : "=" }, { "version_value" : "45.1", "version_affected" : "=" }, { "version_value" : "45.2", "version_affected" : "=" }, { "version_value" : "45.3", "version_affected" : "=" }, { "version_value" : "45.4", "version_affected" : "=" }, { "version_value" : "45.5", "version_affected" : "=" }, { "version_value" : "45.6", "version_affected" : "=" }, { "version_value" : "45.7", "version_affected" : "=" }, { "version_value" : "45.8", "version_affected" : "=" }, { "version_value" : "45.9", "version_affected" : "=" }, { "version_value" : "45.10", "version_affected" : "=" }, { "version_value" : "45.11", "version_affected" : "=" }, { "version_value" : "48", "version_affected" : "=" }, { "version_value" : "50", "version_affected" : "=" }, { "version_value" : "51", "version_affected" : "=" }, { "version_value" : "52", "version_affected" : "=" }, { "version_value" : "52.1", "version_affected" : "=" }, { "version_value" : "52.2", "version_affected" : "=" }, { "version_value" : "52.4", "version_affected" : "=" }, { "version_value" : "52.5", "version_affected" : "=" }, { "version_value" : "52.6", "version_affected" : "=" }, { "version_value" : "52.7", "version_affected" : "=" }, { "version_value" : "52.8", "version_affected" : "=" }, { "version_value" : "52.9", "version_affected" : "=" }, { "version_value" : "52.10", "version_affected" : "=" }, { "version_value" : "53", "version_affected" : "=" }, { "version_value" : "53.1", "version_affected" : "=" }, { "version_value" : "53.2", "version_affected" : "=" }, { "version_value" : "53.3", "version_affected" : "=" }, { "version_value" : "54", "version_affected" : "=" }, { "version_value" : "55", "version_affected" : "=" }, { "version_value" : "55.1", "version_affected" : "=" }, { "version_value" : "55.2", "version_affected" : "=" }, { "version_value" : "56", "version_affected" : "=" }, { "version_value" : "57", "version_affected" : "=" }, { "version_value" : "57.1", "version_affected" : "=" }, { "version_value" : "57.2", "version_affected" : "=" }, { "version_value" : "57.3", "version_affected" : "=" }, { "version_value" : "57.4", "version_affected" : "=" }, { "version_value" : "58", "version_affected" : "=" }, { "version_value" : "58.1", "version_affected" : "=" }, { "version_value" : "59", "version_affected" : "=" }, { "version_value" : "60", "version_affected" : "=" }, { "version_value" : "60.2", "version_affected" : "=" }, { "version_value" : "61.0", "version_affected" : "=" }, { "version_value" : "62.0", "version_affected" : "=" }, { "version_value" : "63.0", "version_affected" : "=" }, { "version_value" : "64.0", "version_affected" : "=" }, { "version_value" : "66.0", "version_affected" : "=" }, { "version_value" : "67.0", "version_affected" : "=" }, { "version_value" : "68.0", "version_affected" : "=" }, { "version_value" : "69.0", "version_affected" : "=" }, { "version_value" : "70.0", "version_affected" : "=" }, { "version_value" : "71.0", "version_affected" : "=" }, { "version_value" : "72.0", "version_affected" : "=" }, { "version_value" : "73.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudfoundry.org/blog/cve-2019-11268", "name" : "https://www.cloudfoundry.org/blog/cve-2019-11268", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and groups in all other identity zones." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pivotal_software:cloud_foundry_uaa-release:*:*:*:*:*:*:*:*", "versionEndExcluding" : "73.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T18:15Z", "lastModifiedDate" : "2019-07-18T16:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1127", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1127", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1128." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1128", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1128", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1117, CVE-2019-1118, CVE-2019-1119, CVE-2019-1120, CVE-2019-1121, CVE-2019-1122, CVE-2019-1123, CVE-2019-1124, CVE-2019-1127." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-16T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1129", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1129", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1130", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_10", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1607", "version_affected" : "=" }, { "version_value" : "1703", "version_affected" : "=" }, { "version_value" : "1709", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1809", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_rt_8.1", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2012", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2016", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1803", "version_affected" : "=" }, { "version_value" : "1903", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2019", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-17T01:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1132", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1134", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "sharepoint_enterprise_server", "version" : { "version_data" : [ { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" } ] } }, { "product_name" : "sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2019", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1134", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T16:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1136", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2010", "version_affected" : "=" }, { "version_value" : "2013", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1136", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T15:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11360", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netfilter", "product" : { "product_data" : [ { "product_name" : "iptables", "version" : { "version_data" : [ { "version_value" : "1.8.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/", "name" : "https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] }, { "url" : "https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e", "name" : "https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netfilter:iptables:1.8.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-12T14:15Z", "lastModifiedDate" : "2019-07-15T12:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1137", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2013", "version_affected" : "=" }, { "version_value" : "2016", "version_affected" : "=" }, { "version_value" : "2019", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1137", "name" : "N/A", "refsource" : "N/A", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T19:15Z", "lastModifiedDate" : "2019-07-19T17:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11535", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://s3.amazonaws.com/downloads.linksys.com/support/assets/releasenotes/Linksys%20RE6300%20RE6400%20Firmware%20Release%20Notes_v1.2.05.001.txt", "name" : "http://s3.amazonaws.com/downloads.linksys.com/support/assets/releasenotes/Linksys%20RE6300%20RE6400%20Firmware%20Release%20Notes_v1.2.05.001.txt", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11552", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bordplate.no/blog/en/post/crashplan-privilege-escalation/", "name" : "https://bordplate.no/blog/en/post/crashplan-privilege-escalation/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Untrusted_data_is_executed_as_System_via_a_PAC_file_read_by_CrashPlanService.exe", "name" : "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Untrusted_data_is_executed_as_System_via_a_PAC_file_read_by_CrashPlanService.exe", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Code42 Enterprise and Crashplan for Small Business Client version 6.7 before 6.7.5, 6.8 before 6.8.8, and 6.9 before 6.9.4 allows eval injection. A proxy auto-configuration file, crafted by a lesser privileged user, may be used to execute arbitrary code at a higher privilege as the service user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T14:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11553", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Privilege_Escalation_in_LoginToken_API", "name" : "https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Privilege_Escalation_in_LoginToken_API", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Code42 for Enterprise through 6.8.4 has Incorrect Access Control." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11650", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-254" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.netiq.com/documentation/advanced-authentication-60/advanced-authentication-releasenotes-60/data/advanced-authentication-releasenotes-60.html#t49vfiy1udvg", "name" : "https://www.netiq.com/documentation/advanced-authentication-60/advanced-authentication-releasenotes-60/data/advanced-authentication-releasenotes-60.html#t49vfiy1udvg", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A potential Man in the Middle attack (MITM) was found in NetIQ Advanced Authentication Framework versions prior to 6.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microfocus:netiq_advanced_authentication_framework:*:*:*:*:*:*:*:*", "versionEndExcluding" : "6.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-14T22:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1167", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1167", "name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1167", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11771", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "eclipse", "product" : { "product_data" : [ { "product_name" : "openj9", "version" : { "version_data" : [ { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055", "name" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=548055", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.15.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-19T16:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11772", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=549075", "name" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=549075", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Eclipse OpenJ9 prior to 0.15, the String.getBytes(int, int, byte[], int) method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Java code run under a SecurityManager." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11889", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sony", "product" : { "product_data" : [ { "product_name" : "bravia_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html", "name" : "http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jul/8", "name" : "20190709 Two vulnerabilities found in Sony BRAVIA Smart TVs", "refsource" : "FULLDISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/", "name" : "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.first.org/members/teams/sony_psirt", "name" : "https://www.first.org/members/teams/sony_psirt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sony:bravia_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:sony:bravia:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T13:15Z", "lastModifiedDate" : "2019-07-15T16:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11890", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sony", "product" : { "product_data" : [ { "product_name" : "bravia_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html", "name" : "http://packetstormsecurity.com/files/153547/Sony-BRAVIA-Smart-TV-Denial-Of-Service.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jul/8", "name" : "20190709 Two vulnerabilities found in Sony BRAVIA Smart TVs", "refsource" : "FULLDISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/", "name" : "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.first.org/members/teams/sony_psirt", "name" : "https://www.first.org/members/teams/sony_psirt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sony:bravia_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:sony:bravia:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T13:15Z", "lastModifiedDate" : "2019-07-15T16:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11989", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03941en_us", "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03941en_us", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T22:15Z", "lastModifiedDate" : "2019-07-19T22:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11990", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03937en_us", "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03937en_us", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA (Agent module ) could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7, 10.0 for Apache 2.4 on HP-UX 11i v3, 10.0 for IIS on Windows, 11.0 for Apache 2.4 on RHEL 7, MFA Proxy 4.0 (Agent module only) for Apache 2.4 on RHEL 7." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T22:15Z", "lastModifiedDate" : "2019-07-19T22:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-11991", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us", "name" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03918en_us", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HPE has identified a vulnerability in HPE 3PAR Service Processor (SP) version 4.1 through 4.4. HPE 3PAR Service Processor (SP) version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service Processor and any managed 3PAR arrays." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:3par_service_processor_firmware:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.1", "versionEndIncluding" : "4.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:3par_service_processor:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.7 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 9.5, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T19:15Z", "lastModifiedDate" : "2019-07-16T13:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12171", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dropbox", "product" : { "product_data" : [ { "product_name" : "dropbox", "version" : { "version_data" : [ { "version_value" : "71.4.108.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-327" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://drive.google.com/open?id=1DCGurwRTu0HsUpTglVR0jgItZNqqDm_5", "name" : "https://drive.google.com/open?id=1DCGurwRTu0HsUpTglVR0jgItZNqqDm_5", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8", "name" : "https://drive.google.com/open?id=1msz6pb08crPC0VT7s_Z_KTsKm9CbLJEXNsmRwzoNLy8", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) in the Dropbox desktop application 71.4.108.0 store cleartext credentials in memory upon successful login or new account creation. These are not securely freed in the running process." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dropbox:dropbox:71.4.108.0:*:*:*:*:desktop:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-08T13:15Z", "lastModifiedDate" : "2019-07-11T18:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12175", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/zeek/zeek/releases/tag/v2.6.2", "name" : "https://github.com/zeek/zeek/releases/tag/v2.6.2", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Zeek Network Security Monitor (formerly known as Bro) before 2.6.2, a NULL pointer dereference in the Kerberos (aka KRB) protocol parser leads to DoS because a case-type index is mishandled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-17T18:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://laolisafe.com/h3cloud-sql-injection-vulnerability/", "name" : "https://laolisafe.com/h3cloud-sql-injection-vulnerability/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "H3C H3Cloud OS all versions allows SQL injection via the ear/grid_event sidx parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T16:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12363", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mybb-2fa_project", "product" : { "product_data" : [ { "product_name" : "mybb-2fa", "version" : { "version_data" : [ { "version_value" : "2014-11-05", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://community.mybb.com/thread-162369.html", "name" : "https://community.mybb.com/thread-162369.html", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://seekurity.com/blog/advisories/mybb-two-factor-authentication-extension-vulnerabilities/", "name" : "https://seekurity.com/blog/advisories/mybb-two-factor-authentication-extension-vulnerabilities/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An CSRF issue was discovered in the JN-Jones MyBB-2FA plugin through 2014-11-05 for MyBB. An attacker can forge a request to an installed mybb2fa plugin to control its state via usercp.php?action=mybb2fa&do=deactivate (or usercp.php?action=mybb2fa&do=activate). A deactivate operation lowers the security of the targeted account by disabling two factor authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mybb-2fa_project:mybb-2fa:*:*:*:*:*:mybb:*:*", "versionEndIncluding" : "2014-11-05" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-17T17:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12453", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.microstrategy.com/producthelp/10.10/Readme/content/web.htm", "name" : "http://www.microstrategy.com/producthelp/10.10/Readme/content/web.htm", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/undefinedmode/CVE-2019-12453", "name" : "https://github.com/undefinedmode/CVE-2019-12453", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In MicroStrategy Web before 10.1 patch 10, stored XSS is possible in the FLTB parameter due to missing input validation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12466", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.32.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T25227", "name" : "https://phabricator.wikimedia.org/T25227", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wikimedia MediaWiki through 1.32.1 allows CSRF." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.32.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T20:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12467", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" }, { "version_value" : "1.3.17", "version_affected" : "=" }, { "version_value" : "1.3.18", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" }, { "version_value" : "1.6.10", "version_affected" : "=" }, { "version_value" : "1.6.11", "version_affected" : "=" }, { "version_value" : "1.6.12", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.11", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "1.12.4", "version_affected" : "=" }, { "version_value" : "1.13.0", "version_affected" : "=" }, { "version_value" : "1.13.1", "version_affected" : "=" }, { "version_value" : "1.13.2", "version_affected" : "=" }, { "version_value" : "1.13.3", "version_affected" : "=" }, { "version_value" : "1.13.4", "version_affected" : "=" }, { "version_value" : "1.13.5", "version_affected" : "=" }, { "version_value" : "1.14.0", "version_affected" : "=" }, { "version_value" : "1.14.1", "version_affected" : "=" }, { "version_value" : "1.15.0", "version_affected" : "=" }, { "version_value" : "1.15.1", "version_affected" : "=" }, { "version_value" : "1.15.2", "version_affected" : "=" }, { "version_value" : "1.15.3", "version_affected" : "=" }, { "version_value" : "1.15.4", "version_affected" : "=" }, { "version_value" : "1.15.5", "version_affected" : "=" }, { "version_value" : "1.16.0", "version_affected" : "=" }, { "version_value" : "1.16.1", "version_affected" : "=" }, { "version_value" : "1.16.2", "version_affected" : "=" }, { "version_value" : "1.16.3", "version_affected" : "=" }, { "version_value" : "1.16.4", "version_affected" : "=" }, { "version_value" : "1.16.5", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" }, { "version_value" : "1.17.0", "version_affected" : "=" }, { "version_value" : "1.17.1", "version_affected" : "=" }, { "version_value" : "1.17.2", "version_affected" : "=" }, { "version_value" : "1.17.3", "version_affected" : "=" }, { "version_value" : "1.17.4", "version_affected" : "=" }, { "version_value" : "1.17.5", "version_affected" : "=" }, { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.18.0", "version_affected" : "=" }, { "version_value" : "1.18.1", "version_affected" : "=" }, { "version_value" : "1.18.2", "version_affected" : "=" }, { "version_value" : "1.18.3", "version_affected" : "=" }, { "version_value" : "1.18.4", "version_affected" : "=" }, { "version_value" : "1.18.5", "version_affected" : "=" }, { "version_value" : "1.18.6", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19.0", "version_affected" : "=" }, { "version_value" : "1.19.1", "version_affected" : "=" }, { "version_value" : "1.19.2", "version_affected" : "=" }, { "version_value" : "1.19.3", "version_affected" : "=" }, { "version_value" : "1.19.4", "version_affected" : "=" }, { "version_value" : "1.19.5", "version_affected" : "=" }, { "version_value" : "1.19.6", "version_affected" : "=" }, { "version_value" : "1.19.7", "version_affected" : "=" }, { "version_value" : "1.19.8", "version_affected" : "=" }, { "version_value" : "1.19.9", "version_affected" : "=" }, { "version_value" : "1.19.10", "version_affected" : "=" }, { "version_value" : "1.19.11", "version_affected" : "=" }, { "version_value" : "1.19.12", "version_affected" : "=" }, { "version_value" : "1.19.13", "version_affected" : "=" }, { "version_value" : "1.19.14", "version_affected" : "=" }, { "version_value" : "1.19.15", "version_affected" : "=" }, { "version_value" : "1.19.16", "version_affected" : "=" }, { "version_value" : "1.19.17", "version_affected" : "=" }, { "version_value" : "1.19.18", "version_affected" : "=" }, { "version_value" : "1.19.19", "version_affected" : "=" }, { "version_value" : "1.19.20", "version_affected" : "=" }, { "version_value" : "1.19.21", "version_affected" : "=" }, { "version_value" : "1.19.22", "version_affected" : "=" }, { "version_value" : "1.19.23", "version_affected" : "=" }, { "version_value" : "1.19.24", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.20.0", "version_affected" : "=" }, { "version_value" : "1.20.1", "version_affected" : "=" }, { "version_value" : "1.20.2", "version_affected" : "=" }, { "version_value" : "1.20.3", "version_affected" : "=" }, { "version_value" : "1.20.4", "version_affected" : "=" }, { "version_value" : "1.20.5", "version_affected" : "=" }, { "version_value" : "1.20.6", "version_affected" : "=" }, { "version_value" : "1.20.7", "version_affected" : "=" }, { "version_value" : "1.20.8", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21.0", "version_affected" : "=" }, { "version_value" : "1.21.1", "version_affected" : "=" }, { "version_value" : "1.21.2", "version_affected" : "=" }, { "version_value" : "1.21.3", "version_affected" : "=" }, { "version_value" : "1.21.4", "version_affected" : "=" }, { "version_value" : "1.21.5", "version_affected" : "=" }, { "version_value" : "1.21.6", "version_affected" : "=" }, { "version_value" : "1.21.7", "version_affected" : "=" }, { "version_value" : "1.21.8", "version_affected" : "=" }, { "version_value" : "1.21.9", "version_affected" : "=" }, { "version_value" : "1.21.10", "version_affected" : "=" }, { "version_value" : "1.21.11", "version_affected" : "=" }, { "version_value" : "1.22.0", "version_affected" : "=" }, { "version_value" : "1.22.1", "version_affected" : "=" }, { "version_value" : "1.22.2", "version_affected" : "=" }, { "version_value" : "1.22.3", "version_affected" : "=" }, { "version_value" : "1.22.4", "version_affected" : "=" }, { "version_value" : "1.22.5", "version_affected" : "=" }, { "version_value" : "1.22.6", "version_affected" : "=" }, { "version_value" : "1.22.7", "version_affected" : "=" }, { "version_value" : "1.22.8", "version_affected" : "=" }, { "version_value" : "1.22.9", "version_affected" : "=" }, { "version_value" : "1.22.10", "version_affected" : "=" }, { "version_value" : "1.22.11", "version_affected" : "=" }, { "version_value" : "1.22.12", "version_affected" : "=" }, { "version_value" : "1.22.13", "version_affected" : "=" }, { "version_value" : "1.22.14", "version_affected" : "=" }, { "version_value" : "1.22.15", "version_affected" : "=" }, { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.23.1", "version_affected" : "=" }, { "version_value" : "1.23.2", "version_affected" : "=" }, { "version_value" : "1.23.3", "version_affected" : "=" }, { "version_value" : "1.23.4", "version_affected" : "=" }, { "version_value" : "1.23.5", "version_affected" : "=" }, { "version_value" : "1.23.6", "version_affected" : "=" }, { "version_value" : "1.23.7", "version_affected" : "=" }, { "version_value" : "1.23.8", "version_affected" : "=" }, { "version_value" : "1.23.9", "version_affected" : "=" }, { "version_value" : "1.23.10", "version_affected" : "=" }, { "version_value" : "1.23.11", "version_affected" : "=" }, { "version_value" : "1.23.12", "version_affected" : "=" }, { "version_value" : "1.23.13", "version_affected" : "=" }, { "version_value" : "1.23.14", "version_affected" : "=" }, { "version_value" : "1.23.15", "version_affected" : "=" }, { "version_value" : "1.23.16", "version_affected" : "=" }, { "version_value" : "1.23.17", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.24.5", "version_affected" : "=" }, { "version_value" : "1.24.6", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.25.1", "version_affected" : "=" }, { "version_value" : "1.25.2", "version_affected" : "=" }, { "version_value" : "1.25.3", "version_affected" : "=" }, { "version_value" : "1.25.4", "version_affected" : "=" }, { "version_value" : "1.25.5", "version_affected" : "=" }, { "version_value" : "1.25.6", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T209794", "name" : "https://phabricator.wikimedia.org/T209794", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.30.0", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-16T13:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12468", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.27.6", "version_affected" : "=" }, { "version_value" : "1.27.7", "version_affected" : "=" }, { "version_value" : "1.28.0", "version_affected" : "=" }, { "version_value" : "1.28.1", "version_affected" : "=" }, { "version_value" : "1.28.2", "version_affected" : "=" }, { "version_value" : "1.28.3", "version_affected" : "=" }, { "version_value" : "1.29.0", "version_affected" : "=" }, { "version_value" : "1.29.1", "version_affected" : "=" }, { "version_value" : "1.29.2", "version_affected" : "=" }, { "version_value" : "1.29.3", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.30.2", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.31.2", "version_affected" : "=" }, { "version_value" : "1.31.3", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/", "name" : "https://lists.wikimedia.org/pipermail/mediawiki-announce/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T197279", "name" : "https://phabricator.wikimedia.org/T197279", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.27.0", "versionEndIncluding" : "1.32.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T15:15Z", "lastModifiedDate" : "2019-07-17T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12469", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" }, { "version_value" : "1.3.17", "version_affected" : "=" }, { "version_value" : "1.3.18", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" }, { "version_value" : "1.6.10", "version_affected" : "=" }, { "version_value" : "1.6.11", "version_affected" : "=" }, { "version_value" : "1.6.12", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.11", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "1.12.4", "version_affected" : "=" }, { "version_value" : "1.13.0", "version_affected" : "=" }, { "version_value" : "1.13.1", "version_affected" : "=" }, { "version_value" : "1.13.2", "version_affected" : "=" }, { "version_value" : "1.13.3", "version_affected" : "=" }, { "version_value" : "1.13.4", "version_affected" : "=" }, { "version_value" : "1.13.5", "version_affected" : "=" }, { "version_value" : "1.14.0", "version_affected" : "=" }, { "version_value" : "1.14.1", "version_affected" : "=" }, { "version_value" : "1.15.0", "version_affected" : "=" }, { "version_value" : "1.15.1", "version_affected" : "=" }, { "version_value" : "1.15.2", "version_affected" : "=" }, { "version_value" : "1.15.3", "version_affected" : "=" }, { "version_value" : "1.15.4", "version_affected" : "=" }, { "version_value" : "1.15.5", "version_affected" : "=" }, { "version_value" : "1.16.0", "version_affected" : "=" }, { "version_value" : "1.16.1", "version_affected" : "=" }, { "version_value" : "1.16.2", "version_affected" : "=" }, { "version_value" : "1.16.3", "version_affected" : "=" }, { "version_value" : "1.16.4", "version_affected" : "=" }, { "version_value" : "1.16.5", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" }, { "version_value" : "1.17.0", "version_affected" : "=" }, { "version_value" : "1.17.1", "version_affected" : "=" }, { "version_value" : "1.17.2", "version_affected" : "=" }, { "version_value" : "1.17.3", "version_affected" : "=" }, { "version_value" : "1.17.4", "version_affected" : "=" }, { "version_value" : "1.17.5", "version_affected" : "=" }, { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.18.0", "version_affected" : "=" }, { "version_value" : "1.18.1", "version_affected" : "=" }, { "version_value" : "1.18.2", "version_affected" : "=" }, { "version_value" : "1.18.3", "version_affected" : "=" }, { "version_value" : "1.18.4", "version_affected" : "=" }, { "version_value" : "1.18.5", "version_affected" : "=" }, { "version_value" : "1.18.6", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19.0", "version_affected" : "=" }, { "version_value" : "1.19.1", "version_affected" : "=" }, { "version_value" : "1.19.2", "version_affected" : "=" }, { "version_value" : "1.19.3", "version_affected" : "=" }, { "version_value" : "1.19.4", "version_affected" : "=" }, { "version_value" : "1.19.5", "version_affected" : "=" }, { "version_value" : "1.19.6", "version_affected" : "=" }, { "version_value" : "1.19.7", "version_affected" : "=" }, { "version_value" : "1.19.8", "version_affected" : "=" }, { "version_value" : "1.19.9", "version_affected" : "=" }, { "version_value" : "1.19.10", "version_affected" : "=" }, { "version_value" : "1.19.11", "version_affected" : "=" }, { "version_value" : "1.19.12", "version_affected" : "=" }, { "version_value" : "1.19.13", "version_affected" : "=" }, { "version_value" : "1.19.14", "version_affected" : "=" }, { "version_value" : "1.19.15", "version_affected" : "=" }, { "version_value" : "1.19.16", "version_affected" : "=" }, { "version_value" : "1.19.17", "version_affected" : "=" }, { "version_value" : "1.19.18", "version_affected" : "=" }, { "version_value" : "1.19.19", "version_affected" : "=" }, { "version_value" : "1.19.20", "version_affected" : "=" }, { "version_value" : "1.19.21", "version_affected" : "=" }, { "version_value" : "1.19.22", "version_affected" : "=" }, { "version_value" : "1.19.23", "version_affected" : "=" }, { "version_value" : "1.19.24", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.20.0", "version_affected" : "=" }, { "version_value" : "1.20.1", "version_affected" : "=" }, { "version_value" : "1.20.2", "version_affected" : "=" }, { "version_value" : "1.20.3", "version_affected" : "=" }, { "version_value" : "1.20.4", "version_affected" : "=" }, { "version_value" : "1.20.5", "version_affected" : "=" }, { "version_value" : "1.20.6", "version_affected" : "=" }, { "version_value" : "1.20.7", "version_affected" : "=" }, { "version_value" : "1.20.8", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21.0", "version_affected" : "=" }, { "version_value" : "1.21.1", "version_affected" : "=" }, { "version_value" : "1.21.2", "version_affected" : "=" }, { "version_value" : "1.21.3", "version_affected" : "=" }, { "version_value" : "1.21.4", "version_affected" : "=" }, { "version_value" : "1.21.5", "version_affected" : "=" }, { "version_value" : "1.21.6", "version_affected" : "=" }, { "version_value" : "1.21.7", "version_affected" : "=" }, { "version_value" : "1.21.8", "version_affected" : "=" }, { "version_value" : "1.21.9", "version_affected" : "=" }, { "version_value" : "1.21.10", "version_affected" : "=" }, { "version_value" : "1.21.11", "version_affected" : "=" }, { "version_value" : "1.22.0", "version_affected" : "=" }, { "version_value" : "1.22.1", "version_affected" : "=" }, { "version_value" : "1.22.2", "version_affected" : "=" }, { "version_value" : "1.22.3", "version_affected" : "=" }, { "version_value" : "1.22.4", "version_affected" : "=" }, { "version_value" : "1.22.5", "version_affected" : "=" }, { "version_value" : "1.22.6", "version_affected" : "=" }, { "version_value" : "1.22.7", "version_affected" : "=" }, { "version_value" : "1.22.8", "version_affected" : "=" }, { "version_value" : "1.22.9", "version_affected" : "=" }, { "version_value" : "1.22.10", "version_affected" : "=" }, { "version_value" : "1.22.11", "version_affected" : "=" }, { "version_value" : "1.22.12", "version_affected" : "=" }, { "version_value" : "1.22.13", "version_affected" : "=" }, { "version_value" : "1.22.14", "version_affected" : "=" }, { "version_value" : "1.22.15", "version_affected" : "=" }, { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.23.1", "version_affected" : "=" }, { "version_value" : "1.23.2", "version_affected" : "=" }, { "version_value" : "1.23.3", "version_affected" : "=" }, { "version_value" : "1.23.4", "version_affected" : "=" }, { "version_value" : "1.23.5", "version_affected" : "=" }, { "version_value" : "1.23.6", "version_affected" : "=" }, { "version_value" : "1.23.7", "version_affected" : "=" }, { "version_value" : "1.23.8", "version_affected" : "=" }, { "version_value" : "1.23.9", "version_affected" : "=" }, { "version_value" : "1.23.10", "version_affected" : "=" }, { "version_value" : "1.23.11", "version_affected" : "=" }, { "version_value" : "1.23.12", "version_affected" : "=" }, { "version_value" : "1.23.13", "version_affected" : "=" }, { "version_value" : "1.23.14", "version_affected" : "=" }, { "version_value" : "1.23.15", "version_affected" : "=" }, { "version_value" : "1.23.16", "version_affected" : "=" }, { "version_value" : "1.23.17", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.24.5", "version_affected" : "=" }, { "version_value" : "1.24.6", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.25.1", "version_affected" : "=" }, { "version_value" : "1.25.2", "version_affected" : "=" }, { "version_value" : "1.25.3", "version_affected" : "=" }, { "version_value" : "1.25.4", "version_affected" : "=" }, { "version_value" : "1.25.5", "version_affected" : "=" }, { "version_value" : "1.25.6", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.27.7", "version_affected" : "=" }, { "version_value" : "1.28.0", "version_affected" : "=" }, { "version_value" : "1.28.1", "version_affected" : "=" }, { "version_value" : "1.28.2", "version_affected" : "=" }, { "version_value" : "1.28.3", "version_affected" : "=" }, { "version_value" : "1.29.0", "version_affected" : "=" }, { "version_value" : "1.29.1", "version_affected" : "=" }, { "version_value" : "1.29.2", "version_affected" : "=" }, { "version_value" : "1.29.3", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T222036", "name" : "https://phabricator.wikimedia.org/T222036", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.27.7", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T13:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12470", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" }, { "version_value" : "1.3.17", "version_affected" : "=" }, { "version_value" : "1.3.18", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.9", "version_affected" : "=" }, { "version_value" : "1.6.10", "version_affected" : "=" }, { "version_value" : "1.6.11", "version_affected" : "=" }, { "version_value" : "1.6.12", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "1.8.2", "version_affected" : "=" }, { "version_value" : "1.8.3", "version_affected" : "=" }, { "version_value" : "1.8.4", "version_affected" : "=" }, { "version_value" : "1.8.5", "version_affected" : "=" }, { "version_value" : "1.9.0", "version_affected" : "=" }, { "version_value" : "1.9.1", "version_affected" : "=" }, { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" }, { "version_value" : "1.9.5", "version_affected" : "=" }, { "version_value" : "1.9.6", "version_affected" : "=" }, { "version_value" : "1.10.0", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.11", "version_affected" : "=" }, { "version_value" : "1.11.0", "version_affected" : "=" }, { "version_value" : "1.11.1", "version_affected" : "=" }, { "version_value" : "1.11.2", "version_affected" : "=" }, { "version_value" : "1.12.0", "version_affected" : "=" }, { "version_value" : "1.12.1", "version_affected" : "=" }, { "version_value" : "1.12.2", "version_affected" : "=" }, { "version_value" : "1.12.3", "version_affected" : "=" }, { "version_value" : "1.12.4", "version_affected" : "=" }, { "version_value" : "1.13.0", "version_affected" : "=" }, { "version_value" : "1.13.1", "version_affected" : "=" }, { "version_value" : "1.13.2", "version_affected" : "=" }, { "version_value" : "1.13.3", "version_affected" : "=" }, { "version_value" : "1.13.4", "version_affected" : "=" }, { "version_value" : "1.13.5", "version_affected" : "=" }, { "version_value" : "1.14.0", "version_affected" : "=" }, { "version_value" : "1.14.1", "version_affected" : "=" }, { "version_value" : "1.15.0", "version_affected" : "=" }, { "version_value" : "1.15.1", "version_affected" : "=" }, { "version_value" : "1.15.2", "version_affected" : "=" }, { "version_value" : "1.15.3", "version_affected" : "=" }, { "version_value" : "1.15.4", "version_affected" : "=" }, { "version_value" : "1.15.5", "version_affected" : "=" }, { "version_value" : "1.16.0", "version_affected" : "=" }, { "version_value" : "1.16.1", "version_affected" : "=" }, { "version_value" : "1.16.2", "version_affected" : "=" }, { "version_value" : "1.16.3", "version_affected" : "=" }, { "version_value" : "1.16.4", "version_affected" : "=" }, { "version_value" : "1.16.5", "version_affected" : "=" }, { "version_value" : "1.17", "version_affected" : "=" }, { "version_value" : "1.17.0", "version_affected" : "=" }, { "version_value" : "1.17.1", "version_affected" : "=" }, { "version_value" : "1.17.2", "version_affected" : "=" }, { "version_value" : "1.17.3", "version_affected" : "=" }, { "version_value" : "1.17.4", "version_affected" : "=" }, { "version_value" : "1.17.5", "version_affected" : "=" }, { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.18.0", "version_affected" : "=" }, { "version_value" : "1.18.1", "version_affected" : "=" }, { "version_value" : "1.18.2", "version_affected" : "=" }, { "version_value" : "1.18.3", "version_affected" : "=" }, { "version_value" : "1.18.4", "version_affected" : "=" }, { "version_value" : "1.18.5", "version_affected" : "=" }, { "version_value" : "1.18.6", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19.0", "version_affected" : "=" }, { "version_value" : "1.19.1", "version_affected" : "=" }, { "version_value" : "1.19.2", "version_affected" : "=" }, { "version_value" : "1.19.3", "version_affected" : "=" }, { "version_value" : "1.19.4", "version_affected" : "=" }, { "version_value" : "1.19.5", "version_affected" : "=" }, { "version_value" : "1.19.6", "version_affected" : "=" }, { "version_value" : "1.19.7", "version_affected" : "=" }, { "version_value" : "1.19.8", "version_affected" : "=" }, { "version_value" : "1.19.9", "version_affected" : "=" }, { "version_value" : "1.19.10", "version_affected" : "=" }, { "version_value" : "1.19.11", "version_affected" : "=" }, { "version_value" : "1.19.12", "version_affected" : "=" }, { "version_value" : "1.19.13", "version_affected" : "=" }, { "version_value" : "1.19.14", "version_affected" : "=" }, { "version_value" : "1.19.15", "version_affected" : "=" }, { "version_value" : "1.19.16", "version_affected" : "=" }, { "version_value" : "1.19.17", "version_affected" : "=" }, { "version_value" : "1.19.18", "version_affected" : "=" }, { "version_value" : "1.19.19", "version_affected" : "=" }, { "version_value" : "1.19.20", "version_affected" : "=" }, { "version_value" : "1.19.21", "version_affected" : "=" }, { "version_value" : "1.19.22", "version_affected" : "=" }, { "version_value" : "1.19.23", "version_affected" : "=" }, { "version_value" : "1.19.24", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.20.0", "version_affected" : "=" }, { "version_value" : "1.20.1", "version_affected" : "=" }, { "version_value" : "1.20.2", "version_affected" : "=" }, { "version_value" : "1.20.3", "version_affected" : "=" }, { "version_value" : "1.20.4", "version_affected" : "=" }, { "version_value" : "1.20.5", "version_affected" : "=" }, { "version_value" : "1.20.6", "version_affected" : "=" }, { "version_value" : "1.20.7", "version_affected" : "=" }, { "version_value" : "1.20.8", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21.0", "version_affected" : "=" }, { "version_value" : "1.21.1", "version_affected" : "=" }, { "version_value" : "1.21.2", "version_affected" : "=" }, { "version_value" : "1.21.3", "version_affected" : "=" }, { "version_value" : "1.21.4", "version_affected" : "=" }, { "version_value" : "1.21.5", "version_affected" : "=" }, { "version_value" : "1.21.6", "version_affected" : "=" }, { "version_value" : "1.21.7", "version_affected" : "=" }, { "version_value" : "1.21.8", "version_affected" : "=" }, { "version_value" : "1.21.9", "version_affected" : "=" }, { "version_value" : "1.21.10", "version_affected" : "=" }, { "version_value" : "1.21.11", "version_affected" : "=" }, { "version_value" : "1.22.0", "version_affected" : "=" }, { "version_value" : "1.22.1", "version_affected" : "=" }, { "version_value" : "1.22.2", "version_affected" : "=" }, { "version_value" : "1.22.3", "version_affected" : "=" }, { "version_value" : "1.22.4", "version_affected" : "=" }, { "version_value" : "1.22.5", "version_affected" : "=" }, { "version_value" : "1.22.6", "version_affected" : "=" }, { "version_value" : "1.22.7", "version_affected" : "=" }, { "version_value" : "1.22.8", "version_affected" : "=" }, { "version_value" : "1.22.9", "version_affected" : "=" }, { "version_value" : "1.22.10", "version_affected" : "=" }, { "version_value" : "1.22.11", "version_affected" : "=" }, { "version_value" : "1.22.12", "version_affected" : "=" }, { "version_value" : "1.22.13", "version_affected" : "=" }, { "version_value" : "1.22.14", "version_affected" : "=" }, { "version_value" : "1.22.15", "version_affected" : "=" }, { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.23.1", "version_affected" : "=" }, { "version_value" : "1.23.2", "version_affected" : "=" }, { "version_value" : "1.23.3", "version_affected" : "=" }, { "version_value" : "1.23.4", "version_affected" : "=" }, { "version_value" : "1.23.5", "version_affected" : "=" }, { "version_value" : "1.23.6", "version_affected" : "=" }, { "version_value" : "1.23.7", "version_affected" : "=" }, { "version_value" : "1.23.8", "version_affected" : "=" }, { "version_value" : "1.23.9", "version_affected" : "=" }, { "version_value" : "1.23.10", "version_affected" : "=" }, { "version_value" : "1.23.11", "version_affected" : "=" }, { "version_value" : "1.23.12", "version_affected" : "=" }, { "version_value" : "1.23.13", "version_affected" : "=" }, { "version_value" : "1.23.14", "version_affected" : "=" }, { "version_value" : "1.23.15", "version_affected" : "=" }, { "version_value" : "1.23.16", "version_affected" : "=" }, { "version_value" : "1.23.17", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.24.5", "version_affected" : "=" }, { "version_value" : "1.24.6", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.25.1", "version_affected" : "=" }, { "version_value" : "1.25.2", "version_affected" : "=" }, { "version_value" : "1.25.3", "version_affected" : "=" }, { "version_value" : "1.25.4", "version_affected" : "=" }, { "version_value" : "1.25.5", "version_affected" : "=" }, { "version_value" : "1.25.6", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.27.7", "version_affected" : "=" }, { "version_value" : "1.28.0", "version_affected" : "=" }, { "version_value" : "1.28.1", "version_affected" : "=" }, { "version_value" : "1.28.2", "version_affected" : "=" }, { "version_value" : "1.28.3", "version_affected" : "=" }, { "version_value" : "1.29.0", "version_affected" : "=" }, { "version_value" : "1.29.1", "version_affected" : "=" }, { "version_value" : "1.29.2", "version_affected" : "=" }, { "version_value" : "1.29.3", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T222038", "name" : "https://phabricator.wikimedia.org/T222038", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.27.7", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T13:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12471", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T207603", "name" : "https://phabricator.wikimedia.org/T207603", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.30.0", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-16T13:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12472", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.18.0", "version_affected" : "=" }, { "version_value" : "1.18.1", "version_affected" : "=" }, { "version_value" : "1.18.2", "version_affected" : "=" }, { "version_value" : "1.18.3", "version_affected" : "=" }, { "version_value" : "1.18.4", "version_affected" : "=" }, { "version_value" : "1.18.5", "version_affected" : "=" }, { "version_value" : "1.18.6", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19.0", "version_affected" : "=" }, { "version_value" : "1.19.1", "version_affected" : "=" }, { "version_value" : "1.19.2", "version_affected" : "=" }, { "version_value" : "1.19.3", "version_affected" : "=" }, { "version_value" : "1.19.4", "version_affected" : "=" }, { "version_value" : "1.19.5", "version_affected" : "=" }, { "version_value" : "1.19.6", "version_affected" : "=" }, { "version_value" : "1.19.7", "version_affected" : "=" }, { "version_value" : "1.19.8", "version_affected" : "=" }, { "version_value" : "1.19.9", "version_affected" : "=" }, { "version_value" : "1.19.10", "version_affected" : "=" }, { "version_value" : "1.19.11", "version_affected" : "=" }, { "version_value" : "1.19.12", "version_affected" : "=" }, { "version_value" : "1.19.13", "version_affected" : "=" }, { "version_value" : "1.19.14", "version_affected" : "=" }, { "version_value" : "1.19.15", "version_affected" : "=" }, { "version_value" : "1.19.16", "version_affected" : "=" }, { "version_value" : "1.19.17", "version_affected" : "=" }, { "version_value" : "1.19.18", "version_affected" : "=" }, { "version_value" : "1.19.19", "version_affected" : "=" }, { "version_value" : "1.19.20", "version_affected" : "=" }, { "version_value" : "1.19.21", "version_affected" : "=" }, { "version_value" : "1.19.22", "version_affected" : "=" }, { "version_value" : "1.19.23", "version_affected" : "=" }, { "version_value" : "1.19.24", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.20.0", "version_affected" : "=" }, { "version_value" : "1.20.1", "version_affected" : "=" }, { "version_value" : "1.20.2", "version_affected" : "=" }, { "version_value" : "1.20.3", "version_affected" : "=" }, { "version_value" : "1.20.4", "version_affected" : "=" }, { "version_value" : "1.20.5", "version_affected" : "=" }, { "version_value" : "1.20.6", "version_affected" : "=" }, { "version_value" : "1.20.7", "version_affected" : "=" }, { "version_value" : "1.20.8", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21.0", "version_affected" : "=" }, { "version_value" : "1.21.1", "version_affected" : "=" }, { "version_value" : "1.21.2", "version_affected" : "=" }, { "version_value" : "1.21.3", "version_affected" : "=" }, { "version_value" : "1.21.4", "version_affected" : "=" }, { "version_value" : "1.21.5", "version_affected" : "=" }, { "version_value" : "1.21.6", "version_affected" : "=" }, { "version_value" : "1.21.7", "version_affected" : "=" }, { "version_value" : "1.21.8", "version_affected" : "=" }, { "version_value" : "1.21.9", "version_affected" : "=" }, { "version_value" : "1.21.10", "version_affected" : "=" }, { "version_value" : "1.21.11", "version_affected" : "=" }, { "version_value" : "1.22.0", "version_affected" : "=" }, { "version_value" : "1.22.1", "version_affected" : "=" }, { "version_value" : "1.22.2", "version_affected" : "=" }, { "version_value" : "1.22.3", "version_affected" : "=" }, { "version_value" : "1.22.4", "version_affected" : "=" }, { "version_value" : "1.22.5", "version_affected" : "=" }, { "version_value" : "1.22.6", "version_affected" : "=" }, { "version_value" : "1.22.7", "version_affected" : "=" }, { "version_value" : "1.22.8", "version_affected" : "=" }, { "version_value" : "1.22.9", "version_affected" : "=" }, { "version_value" : "1.22.10", "version_affected" : "=" }, { "version_value" : "1.22.11", "version_affected" : "=" }, { "version_value" : "1.22.12", "version_affected" : "=" }, { "version_value" : "1.22.13", "version_affected" : "=" }, { "version_value" : "1.22.14", "version_affected" : "=" }, { "version_value" : "1.22.15", "version_affected" : "=" }, { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.23.1", "version_affected" : "=" }, { "version_value" : "1.23.2", "version_affected" : "=" }, { "version_value" : "1.23.3", "version_affected" : "=" }, { "version_value" : "1.23.4", "version_affected" : "=" }, { "version_value" : "1.23.5", "version_affected" : "=" }, { "version_value" : "1.23.6", "version_affected" : "=" }, { "version_value" : "1.23.7", "version_affected" : "=" }, { "version_value" : "1.23.8", "version_affected" : "=" }, { "version_value" : "1.23.9", "version_affected" : "=" }, { "version_value" : "1.23.10", "version_affected" : "=" }, { "version_value" : "1.23.11", "version_affected" : "=" }, { "version_value" : "1.23.12", "version_affected" : "=" }, { "version_value" : "1.23.13", "version_affected" : "=" }, { "version_value" : "1.23.14", "version_affected" : "=" }, { "version_value" : "1.23.15", "version_affected" : "=" }, { "version_value" : "1.23.16", "version_affected" : "=" }, { "version_value" : "1.23.17", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.24.5", "version_affected" : "=" }, { "version_value" : "1.24.6", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.25.1", "version_affected" : "=" }, { "version_value" : "1.25.2", "version_affected" : "=" }, { "version_value" : "1.25.3", "version_affected" : "=" }, { "version_value" : "1.25.4", "version_affected" : "=" }, { "version_value" : "1.25.5", "version_affected" : "=" }, { "version_value" : "1.25.6", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T199540", "name" : "https://phabricator.wikimedia.org/T199540", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.18.0", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.30.0", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-17T15:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12473", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T204729", "name" : "https://phabricator.wikimedia.org/T204729", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.27.0", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.30.0", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-16T13:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12474", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mediawiki", "product" : { "product_data" : [ { "product_name" : "mediawiki", "version" : { "version_data" : [ { "version_value" : "1.23.0", "version_affected" : "=" }, { "version_value" : "1.23.1", "version_affected" : "=" }, { "version_value" : "1.23.2", "version_affected" : "=" }, { "version_value" : "1.23.3", "version_affected" : "=" }, { "version_value" : "1.23.4", "version_affected" : "=" }, { "version_value" : "1.23.5", "version_affected" : "=" }, { "version_value" : "1.23.6", "version_affected" : "=" }, { "version_value" : "1.23.7", "version_affected" : "=" }, { "version_value" : "1.23.8", "version_affected" : "=" }, { "version_value" : "1.23.9", "version_affected" : "=" }, { "version_value" : "1.23.10", "version_affected" : "=" }, { "version_value" : "1.23.11", "version_affected" : "=" }, { "version_value" : "1.23.12", "version_affected" : "=" }, { "version_value" : "1.23.13", "version_affected" : "=" }, { "version_value" : "1.23.14", "version_affected" : "=" }, { "version_value" : "1.23.15", "version_affected" : "=" }, { "version_value" : "1.23.16", "version_affected" : "=" }, { "version_value" : "1.23.17", "version_affected" : "=" }, { "version_value" : "1.24.0", "version_affected" : "=" }, { "version_value" : "1.24.1", "version_affected" : "=" }, { "version_value" : "1.24.2", "version_affected" : "=" }, { "version_value" : "1.24.3", "version_affected" : "=" }, { "version_value" : "1.24.4", "version_affected" : "=" }, { "version_value" : "1.24.5", "version_affected" : "=" }, { "version_value" : "1.24.6", "version_affected" : "=" }, { "version_value" : "1.25.0", "version_affected" : "=" }, { "version_value" : "1.25.1", "version_affected" : "=" }, { "version_value" : "1.25.2", "version_affected" : "=" }, { "version_value" : "1.25.3", "version_affected" : "=" }, { "version_value" : "1.25.4", "version_affected" : "=" }, { "version_value" : "1.25.5", "version_affected" : "=" }, { "version_value" : "1.25.6", "version_affected" : "=" }, { "version_value" : "1.26.0", "version_affected" : "=" }, { "version_value" : "1.26.1", "version_affected" : "=" }, { "version_value" : "1.26.2", "version_affected" : "=" }, { "version_value" : "1.26.3", "version_affected" : "=" }, { "version_value" : "1.26.4", "version_affected" : "=" }, { "version_value" : "1.27.0", "version_affected" : "=" }, { "version_value" : "1.27.1", "version_affected" : "=" }, { "version_value" : "1.27.2", "version_affected" : "=" }, { "version_value" : "1.27.3", "version_affected" : "=" }, { "version_value" : "1.27.4", "version_affected" : "=" }, { "version_value" : "1.27.5", "version_affected" : "=" }, { "version_value" : "1.30.0", "version_affected" : "=" }, { "version_value" : "1.30.1", "version_affected" : "=" }, { "version_value" : "1.31.0", "version_affected" : "=" }, { "version_value" : "1.31.1", "version_affected" : "=" }, { "version_value" : "1.32.0", "version_affected" : "=" }, { "version_value" : "1.32.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "name" : "https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://phabricator.wikimedia.org/T212118", "name" : "https://phabricator.wikimedia.org/T212118", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/12", "name" : "20190612 [SECURITY] [DSA 4460-1] mediawiki security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4460", "name" : "DSA-4460", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.23.0", "versionEndExcluding" : "1.27.6" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.30.0", "versionEndExcluding" : "1.30.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.31.0", "versionEndExcluding" : "1.31.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.32.0", "versionEndExcluding" : "1.32.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T16:15Z", "lastModifiedDate" : "2019-07-11T20:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12475", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microstrategy", "product" : { "product_data" : [ { "product_name" : "microstrategy_web", "version" : { "version_data" : [ { "version_value" : "7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/undefinedmode/CVE-2019-12475", "name" : "https://github.com/undefinedmode/CVE-2019-12475", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In MicroStrategy Web before 10.4.6, there is stored XSS in metric due to insufficient input validation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microstrategy:microstrategy_web:*:*:*:*:*:*:*:*", "versionEndExcluding" : "10.4.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-18T13:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12525", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.3.11", "version_affected" : "=" }, { "version_value" : "3.3.12", "version_affected" : "=" }, { "version_value" : "3.3.13", "version_affected" : "=" }, { "version_value" : "3.3.14", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.5.0.1", "version_affected" : "=" }, { "version_value" : "3.5.0.2", "version_affected" : "=" }, { "version_value" : "3.5.0.3", "version_affected" : "=" }, { "version_value" : "3.5.0.4", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.5.8", "version_affected" : "=" }, { "version_value" : "3.5.9", "version_affected" : "=" }, { "version_value" : "3.5.10", "version_affected" : "=" }, { "version_value" : "3.5.11", "version_affected" : "=" }, { "version_value" : "3.5.12", "version_affected" : "=" }, { "version_value" : "3.5.13", "version_affected" : "=" }, { "version_value" : "3.5.14", "version_affected" : "=" }, { "version_value" : "3.5.15", "version_affected" : "=" }, { "version_value" : "3.5.16", "version_affected" : "=" }, { "version_value" : "3.5.17", "version_affected" : "=" }, { "version_value" : "3.5.18", "version_affected" : "=" }, { "version_value" : "3.5.19", "version_affected" : "=" }, { "version_value" : "3.5.20", "version_affected" : "=" }, { "version_value" : "3.5.21", "version_affected" : "=" }, { "version_value" : "3.5.22", "version_affected" : "=" }, { "version_value" : "3.5.23", "version_affected" : "=" }, { "version_value" : "3.5.24", "version_affected" : "=" }, { "version_value" : "3.5.25", "version_affected" : "=" }, { "version_value" : "3.5.26", "version_affected" : "=" }, { "version_value" : "3.5.27", "version_affected" : "=" }, { "version_value" : "3.5.28", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.16", "version_affected" : "=" }, { "version_value" : "4.0.17", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.19", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.0.22", "version_affected" : "=" }, { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.0.24", "version_affected" : "=" }, { "version_value" : "4.0.25", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.squid-cache.org/Versions/v4/changesets/", "name" : "http://www.squid-cache.org/Versions/v4/changesets/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch", "name" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://github.com/squid-cache/squid/commits/v4", "name" : "https://github.com/squid-cache/squid/commits/v4", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4065-1/", "name" : "USN-4065-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Squid 3.3.9 through 3.5.28 and 4.x through 4.7. When Squid is configured to use Digest authentication, it parses the header Proxy-Authorization. It searches for certain tokens such as domain, uri, and qop. Squid checks if this token's value starts with a quote and ends with one. If so, it performs a memcpy of its length minus 2. Squid never checks whether the value is just a single quote (which would satisfy its requirements), leading to a memcpy of its length minus 1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.3.9", "versionEndIncluding" : "3.5.28" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0", "versionEndIncluding" : "4.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12527", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.0.24", "version_affected" : "=" }, { "version_value" : "4.0.25", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109143", "name" : "109143", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v4/changesets/", "name" : "http://www.squid-cache.org/Versions/v4/changesets/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch", "name" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-7f73e9c5d17664b882ed32590e6af310c247f320.patch", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://github.com/squid-cache/squid/commits/v4", "name" : "https://github.com/squid-cache/squid/commits/v4", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4065-1/", "name" : "USN-4065-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn't greater than the buffer, leading to a heap-based buffer overflow with user controlled data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0.23", "versionEndIncluding" : "4.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12529", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.stable1", "version_affected" : "=" }, { "version_value" : "2.5.stable2", "version_affected" : "=" }, { "version_value" : "2.5.stable3", "version_affected" : "=" }, { "version_value" : "2.5.stable4", "version_affected" : "=" }, { "version_value" : "2.5.stable5", "version_affected" : "=" }, { "version_value" : "2.5.stable6", "version_affected" : "=" }, { "version_value" : "2.5.stable7", "version_affected" : "=" }, { "version_value" : "2.5.stable8", "version_affected" : "=" }, { "version_value" : "2.5.stable9", "version_affected" : "=" }, { "version_value" : "2.5.stable10", "version_affected" : "=" }, { "version_value" : "2.5.stable11", "version_affected" : "=" }, { "version_value" : "2.5.stable12", "version_affected" : "=" }, { "version_value" : "2.5.stable13", "version_affected" : "=" }, { "version_value" : "2.5.stable14", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.7.stable1", "version_affected" : "=" }, { "version_value" : "2.7.stable2", "version_affected" : "=" }, { "version_value" : "2.7.stable3", "version_affected" : "=" }, { "version_value" : "2.7.stable4", "version_affected" : "=" }, { "version_value" : "2.7.stable5", "version_affected" : "=" }, { "version_value" : "2.7.stable6", "version_affected" : "=" }, { "version_value" : "2.7.stable7", "version_affected" : "=" }, { "version_value" : "2.7.stable8", "version_affected" : "=" }, { "version_value" : "2.7.stable9", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.stable1", "version_affected" : "=" }, { "version_value" : "3.0.stable2", "version_affected" : "=" }, { "version_value" : "3.0.stable3", "version_affected" : "=" }, { "version_value" : "3.0.stable4", "version_affected" : "=" }, { "version_value" : "3.0.stable5", "version_affected" : "=" }, { "version_value" : "3.0.stable6", "version_affected" : "=" }, { "version_value" : "3.0.stable7", "version_affected" : "=" }, { "version_value" : "3.0.stable8", "version_affected" : "=" }, { "version_value" : "3.0.stable9", "version_affected" : "=" }, { "version_value" : "3.0.stable10", "version_affected" : "=" }, { "version_value" : "3.0.stable11", "version_affected" : "=" }, { "version_value" : "3.0.stable12", "version_affected" : "=" }, { "version_value" : "3.0.stable13", "version_affected" : "=" }, { "version_value" : "3.0.stable14", "version_affected" : "=" }, { "version_value" : "3.0.stable15", "version_affected" : "=" }, { "version_value" : "3.0.stable16", "version_affected" : "=" }, { "version_value" : "3.0.stable17", "version_affected" : "=" }, { "version_value" : "3.0.stable18", "version_affected" : "=" }, { "version_value" : "3.0.stable19", "version_affected" : "=" }, { "version_value" : "3.0.stable20", "version_affected" : "=" }, { "version_value" : "3.0.stable21", "version_affected" : "=" }, { "version_value" : "3.0.stable22", "version_affected" : "=" }, { "version_value" : "3.0.stable23", "version_affected" : "=" }, { "version_value" : "3.0.stable24", "version_affected" : "=" }, { "version_value" : "3.0.stable25", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0.3", "version_affected" : "=" }, { "version_value" : "3.1.0.4", "version_affected" : "=" }, { "version_value" : "3.1.0.5", "version_affected" : "=" }, { "version_value" : "3.1.0.6", "version_affected" : "=" }, { "version_value" : "3.1.0.7", "version_affected" : "=" }, { "version_value" : "3.1.0.8", "version_affected" : "=" }, { "version_value" : "3.1.0.9", "version_affected" : "=" }, { "version_value" : "3.1.0.10", "version_affected" : "=" }, { "version_value" : "3.1.0.11", "version_affected" : "=" }, { "version_value" : "3.1.0.12", "version_affected" : "=" }, { "version_value" : "3.1.0.13", "version_affected" : "=" }, { "version_value" : "3.1.0.14", "version_affected" : "=" }, { "version_value" : "3.1.0.15", "version_affected" : "=" }, { "version_value" : "3.1.0.16", "version_affected" : "=" }, { "version_value" : "3.1.0.17", "version_affected" : "=" }, { "version_value" : "3.1.0.18", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.5.1", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "3.1.12.1", "version_affected" : "=" }, { "version_value" : "3.1.12.2", "version_affected" : "=" }, { "version_value" : "3.1.12.3", "version_affected" : "=" }, { "version_value" : "3.1.13", "version_affected" : "=" }, { "version_value" : "3.1.14", "version_affected" : "=" }, { "version_value" : "3.1.15", "version_affected" : "=" }, { "version_value" : "3.1.23", "version_affected" : "=" }, { "version_value" : "3.2.0.1", "version_affected" : "=" }, { "version_value" : "3.2.0.2", "version_affected" : "=" }, { "version_value" : "3.2.0.3", "version_affected" : "=" }, { "version_value" : "3.2.0.4", "version_affected" : "=" }, { "version_value" : "3.2.0.5", "version_affected" : "=" }, { "version_value" : "3.2.0.6", "version_affected" : "=" }, { "version_value" : "3.2.0.7", "version_affected" : "=" }, { "version_value" : "3.2.0.8", "version_affected" : "=" }, { "version_value" : "3.2.0.9", "version_affected" : "=" }, { "version_value" : "3.2.0.10", "version_affected" : "=" }, { "version_value" : "3.2.0.11", "version_affected" : "=" }, { "version_value" : "3.2.0.12", "version_affected" : "=" }, { "version_value" : "3.2.0.13", "version_affected" : "=" }, { "version_value" : "3.2.0.14", "version_affected" : "=" }, { "version_value" : "3.2.0.15", "version_affected" : "=" }, { "version_value" : "3.2.0.16", "version_affected" : "=" }, { "version_value" : "3.2.0.17", "version_affected" : "=" }, { "version_value" : "3.2.0.18", "version_affected" : "=" }, { "version_value" : "3.2.0.19", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.2.11", "version_affected" : "=" }, { "version_value" : "3.2.12", "version_affected" : "=" }, { "version_value" : "3.2.13", "version_affected" : "=" }, { "version_value" : "3.2.14", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.0.2", "version_affected" : "=" }, { "version_value" : "3.3.0.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.3.11", "version_affected" : "=" }, { "version_value" : "3.3.12", "version_affected" : "=" }, { "version_value" : "3.3.13", "version_affected" : "=" }, { "version_value" : "3.3.14", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.4.12", "version_affected" : "=" }, { "version_value" : "3.4.13", "version_affected" : "=" }, { "version_value" : "3.4.14", "version_affected" : "=" }, { "version_value" : "3.5.0.1", "version_affected" : "=" }, { "version_value" : "3.5.0.2", "version_affected" : "=" }, { "version_value" : "3.5.0.3", "version_affected" : "=" }, { "version_value" : "3.5.0.4", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.5.8", "version_affected" : "=" }, { "version_value" : "3.5.9", "version_affected" : "=" }, { "version_value" : "3.5.10", "version_affected" : "=" }, { "version_value" : "3.5.11", "version_affected" : "=" }, { "version_value" : "3.5.12", "version_affected" : "=" }, { "version_value" : "3.5.13", "version_affected" : "=" }, { "version_value" : "3.5.14", "version_affected" : "=" }, { "version_value" : "3.5.15", "version_affected" : "=" }, { "version_value" : "3.5.16", "version_affected" : "=" }, { "version_value" : "3.5.17", "version_affected" : "=" }, { "version_value" : "3.5.18", "version_affected" : "=" }, { "version_value" : "3.5.19", "version_affected" : "=" }, { "version_value" : "3.5.20", "version_affected" : "=" }, { "version_value" : "3.5.21", "version_affected" : "=" }, { "version_value" : "3.5.22", "version_affected" : "=" }, { "version_value" : "3.5.23", "version_affected" : "=" }, { "version_value" : "3.5.24", "version_affected" : "=" }, { "version_value" : "3.5.25", "version_affected" : "=" }, { "version_value" : "3.5.26", "version_affected" : "=" }, { "version_value" : "3.5.27", "version_affected" : "=" }, { "version_value" : "3.5.28", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.0.14", "version_affected" : "=" }, { "version_value" : "4.0.15", "version_affected" : "=" }, { "version_value" : "4.0.16", "version_affected" : "=" }, { "version_value" : "4.0.17", "version_affected" : "=" }, { "version_value" : "4.0.18", "version_affected" : "=" }, { "version_value" : "4.0.19", "version_affected" : "=" }, { "version_value" : "4.0.20", "version_affected" : "=" }, { "version_value" : "4.0.21", "version_affected" : "=" }, { "version_value" : "4.0.22", "version_affected" : "=" }, { "version_value" : "4.0.23", "version_affected" : "=" }, { "version_value" : "4.0.24", "version_affected" : "=" }, { "version_value" : "4.0.25", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.squid-cache.org/Versions/v4/changesets/", "name" : "http://www.squid-cache.org/Versions/v4/changesets/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-dd46b5417809647f561d8a5e0e74c3aacd235258.patch", "name" : "http://www.squid-cache.org/Versions/v4/changesets/squid-4-dd46b5417809647f561d8a5e0e74c3aacd235258.patch", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://github.com/squid-cache/squid/commits/v4", "name" : "https://github.com/squid-cache/squid/commits/v4", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4065-1/", "name" : "USN-4065-1", "refsource" : "UBUNTU", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Squid 2.x through 2.7.STABLE9, 3.x through 3.5.28, and 4.x through 4.7. When Squid is configured to use Basic Authentication, the Proxy-Authorization header is parsed via uudecode. uudecode determines how many bytes will be decoded by iterating over the input and checking its table. The length is then used to start decoding the string. There are no checks to ensure that the length it calculates isn't greater than the input buffer. This leads to adjacent memory being decoded as well. An attacker would not be able to retrieve the decoded data unless the Squid maintainer had configured the display of usernames on error pages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0", "versionEndIncluding" : "2.7" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7.stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0", "versionEndIncluding" : "3.5.28" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0", "versionEndIncluding" : "4.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12537", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_assetexplorer", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/asset-explorer/readme.html", "name" : "https://www.manageengine.com/products/asset-explorer/readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T19:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12539", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_servicedesk_plus", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/service-desk/readme.html", "name" : "https://www.manageengine.com/products/service-desk/readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the Purchase component of Zoho ManageEngine ServiceDesk Plus. There is XSS via the SearchN.do search field, a different vulnerability than CVE-2019-12189." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-12T13:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12540", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_servicedesk_plus", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/service-desk/readme.html", "name" : "https://www.manageengine.com/products/service-desk/readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Zoho ManageEngine ServiceDesk Plus 10.5. There is XSS via the WorkOrder.do search field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-15T19:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12571", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "0.9.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12571.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12571.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v0.9.8 beta (build 02099) for macOS could allow an authenticated, local attacker to overwrite arbitrary files. When the client initiates a connection, the XML /tmp/pia-watcher.plist file is created. If the file exists, it will be truncated and the contents completely overwritten. This file is removed on disconnect. An unprivileged user can create a hard or soft link to arbitrary files owned by any user on the system, including root. This creates a denial of service condition and possible data loss if leveraged by a malicious local user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:0.9.8:beta:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 9.2, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12573", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12573.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12573.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpn_launcher binary is setuid root. This binary supports the --log option, which accepts a path as an argument. This parameter is not sanitized, which allows a local unprivileged user to overwrite arbitrary files owned by any user on the system, including root. This creates a denial of service condition and possible data loss if leveraged by a malicious local user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 9.2, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12574", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-426" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12574.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12574.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The updater loads several libraries from a folder that authenticated users have write access to. A low privileged user can leverage this vulnerability to execute arbitrary code as SYSTEM." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:1.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12575", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12575.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12575.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The root_runner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts to load several libraries under /tmp/ruby-deploy.old/lib. A local unprivileged user can create a malicious library under this path to execute arbitrary code as the root user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12576", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12576.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12576.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn_launcher binary is setuid root. This program is called during the connection process and executes several operating system utilities to configure the system. The networksetup utility is called using relative paths. A local unprivileged user can execute arbitrary commands as root by creating a networksetup trojan which will be executed during the connection process. This is possible because the PATH environment variable is not reset prior to executing the OS utility." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12577", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12577.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12577.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The macOS binary openvpn_launcher.64 is setuid root. This binary creates /tmp/pia_upscript.sh when executed. Because the file creation mask (umask) is not reset, the umask value is inherited from the calling process. This value can be manipulated to cause the privileged binary to create files with world writable permissions. A local unprivileged user can modify /tmp/pia_upscript.sh during the connect process to execute arbitrary code as the root user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12578", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12578.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12578.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn_launcher.64 binary is setuid root. This binary executes /opt/pia/openvpn-64/openvpn, passing the parameters provided from the command line. Care was taken to programmatically disable potentially dangerous openvpn parameters; however, the --route-pre-down parameter can be used. This parameter accepts an arbitrary path to a script/program to be executed when OpenVPN exits. The --script-security parameter also needs to be passed to allow for this action to be taken, and --script-security is not currently in the disabled parameter list. A local unprivileged user can pass a malicious script/binary to the --route-pre-down option, which will be executed as root when openvpn is stopped." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "londontrustmedia", "product" : { "product_data" : [ { "product_name" : "private_internet_access_vpn_client", "version" : { "version_data" : [ { "version_value" : "82", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12579.txt", "name" : "https://github.com/mirchr/security-research/blob/master/vulnerabilities/PIA/CVE-2019-12579.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpn_launcher.64 binary is setuid root. This binary accepts several parameters to update the system configuration. These parameters are passed to operating system commands using a \"here\" document. The parameters are not sanitized, which allow for arbitrary commands to be injected using shell metacharacters. A local unprivileged user can pass special crafted parameters that will be interpolated by the operating system calls." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:londontrustmedia:private_internet_access_vpn_client:82:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-16T12:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12595", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_assetexplorer", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "name" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the RCSettings.do rdsName parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-12T13:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12596", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_assetexplorer", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "name" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via SoftwareListView.do with the parameter swType or swComplianceType." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-12T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12597", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_assetexplorer", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "name" : "https://github.com/tarantula-team/Multiple-Cross-Site-Scripting-vulnerabilities-in-Zoho-ManageEngine", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "name" : "https://www.manageengine.com/products/asset-explorer/sp-readme.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via ResourcesAttachments.jsp with the parameter pageName." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_assetexplorer:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-12T13:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12723", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "teclib-edition", "product" : { "product_data" : [ { "product_name" : "fields", "version" : { "version_data" : [ { "version_value" : "1.9.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/pluginsGLPI/fields/blob/master/ajax/reorder.php", "name" : "https://github.com/pluginsGLPI/fields/blob/master/ajax/reorder.php", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/pluginsGLPI/fields/pull/317", "name" : "https://github.com/pluginsGLPI/fields/pull/317", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/pluginsGLPI/fields/releases/tag/1.10.0", "name" : "https://github.com/pluginsGLPI/fields/releases/tag/1.10.0", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI. it allows SQL Injection via container_id and old_order parameters to ajax/reorder.php by an unauthenticated user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:teclib-edition:fields:*:*:*:*:glpi:*:*:*", "versionEndIncluding" : "1.9.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T13:15Z", "lastModifiedDate" : "2019-07-11T15:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12724", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "teclib-edition", "product" : { "product_data" : [ { "product_name" : "fields", "version" : { "version_data" : [ { "version_value" : "1.5.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/pluginsGLPI/news/blob/master/front/alert.form.php", "name" : "https://github.com/pluginsGLPI/news/blob/master/front/alert.form.php", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/pluginsGLPI/news/pull/69", "name" : "https://github.com/pluginsGLPI/news/pull/69", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/pluginsGLPI/news/releases/tag/1.5.3", "name" : "https://github.com/pluginsGLPI/news/releases/tag/1.5.3", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $_POST['name'] parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:teclib-edition:fields:*:*:*:*:*:glpi:*:*", "versionEndIncluding" : "1.5.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T13:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12725", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tarlogic.com/advisories/zeroshell-rce-root.txt", "name" : "https://www.tarlogic.com/advisories/zeroshell-rce-root.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://zeroshell.org/blog/", "name" : "https://zeroshell.org/blog/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T23:15Z", "lastModifiedDate" : "2019-07-19T23:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12731", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.detack.de/en/cve-2019-12731", "name" : "https://www.detack.de/en/cve-2019-12731", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows versions of Snapview Mikogo, versions before 5.10.2 are affected by insecure implementations which allow local attackers to escalate privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mikogo:mikogo:*:*:*:*:windows:*:*:*", "versionEndExcluding" : "5.10.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-12T17:15Z", "lastModifiedDate" : "2019-07-15T12:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12751", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "message_gateway", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.5.3", "version_affected" : "=" }, { "version_value" : "9.5.4", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.6", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.1-3", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" }, { "version_value" : "10.6.5", "version_affected" : "=" }, { "version_value" : "10.6.6", "version_affected" : "=" }, { "version_value" : "10.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/108925", "name" : "108925", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.symantec.com/us/en/article.SYMSA1486.html", "name" : "https://support.symantec.com/us/en/article.SYMSA1486.html", "refsource" : "MISC", "tags" : [ "Mitigation", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:message_gateway:*:*:*:*:*:*:*:*", "versionEndExcluding" : "10.7.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-18T19:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12782", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-285" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.thoughtspot.com/5.1/release/notes.html", "name" : "https://docs.thoughtspot.com/5.1/release/notes.html", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.vsecurity.com/download/advisories/201912782-1.txt", "name" : "https://www.vsecurity.com/download/advisories/201912782-1.txt", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.vsecurity.com/resources/advisories.html", "name" : "https://www.vsecurity.com/resources/advisories.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thoughtspot:thoughtspot:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.4.1", "versionEndIncluding" : "5.1.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T16:15Z", "lastModifiedDate" : "2019-07-19T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12815", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.proftpd.org/show_bug.cgi?id=4372", "name" : "http://bugs.proftpd.org/show_bug.cgi?id=4372", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/proftpd/proftpd/pull/816", "name" : "https://github.com/proftpd/proftpd/pull/816", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://tbspace.de/cve201912815proftpd.html", "name" : "https://tbspace.de/cve201912815proftpd.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T23:15Z", "lastModifiedDate" : "2019-07-19T23:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12820", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.kth.se/polopoly_fs/1.914058.1561621210!/Olsson_Larsson-Forsberg_vacuum.pdf", "name" : "https://www.kth.se/polopoly_fs/1.914058.1561621210!/Olsson_Larsson-Forsberg_vacuum.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner. Actions performed on the app such as changing a password, and personal information it communicates with the server, use unencrypted HTTP. As an example, while logging in through the app to a Jisiwei account, the login request is being sent in cleartext. The vulnerability exists in both the Android and iOS version of the app. An attacker could exploit this by using an MiTM attack on the local network to obtain someone's login credentials, which gives them full access to the robot vacuum cleaner." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T18:15Z", "lastModifiedDate" : "2019-07-19T18:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12821", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.kth.se/polopoly_fs/1.914058.1561621210!/Olsson_Larsson-Forsberg_vacuum.pdf", "name" : "https://www.kth.se/polopoly_fs/1.914058.1561621210!/Olsson_Larsson-Forsberg_vacuum.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability was found in the app 2.0 of the Shenzhen Jisiwei i3 robot vacuum cleaner, while adding a device to the account using a QR-code. The QR-code follows an easily predictable pattern that depends only on the specific device ID of the robot vacuum cleaner. By generating a QR-code containing information about the device ID, it is possible to connect an arbitrary device and gain full access to it. The device ID has an initial \"JSW\" substring followed by a six digit number that depends on the specific device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T18:15Z", "lastModifiedDate" : "2019-07-19T18:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12827", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "digium", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.2.0", "version_affected" : "=" }, { "version_value" : "13.2.1", "version_affected" : "=" }, { "version_value" : "13.3.0", "version_affected" : "=" }, { "version_value" : "13.3.1", "version_affected" : "=" }, { "version_value" : "13.3.2", "version_affected" : "=" }, { "version_value" : "13.4.0", "version_affected" : "=" }, { "version_value" : "13.5.0", "version_affected" : "=" }, { "version_value" : "13.6.0", "version_affected" : "=" }, { "version_value" : "13.7.0", "version_affected" : "=" }, { "version_value" : "13.7.1", "version_affected" : "=" }, { "version_value" : "13.7.2", "version_affected" : "=" }, { "version_value" : "13.8.0", "version_affected" : "=" }, { "version_value" : "13.8.1", "version_affected" : "=" }, { "version_value" : "13.8.2", "version_affected" : "=" }, { "version_value" : "13.9.0", "version_affected" : "=" }, { "version_value" : "13.9.1", "version_affected" : "=" }, { "version_value" : "13.10.0", "version_affected" : "=" }, { "version_value" : "13.11.0", "version_affected" : "=" }, { "version_value" : "13.11.1", "version_affected" : "=" }, { "version_value" : "13.11.2", "version_affected" : "=" }, { "version_value" : "13.12", "version_affected" : "=" }, { "version_value" : "13.12.0", "version_affected" : "=" }, { "version_value" : "13.12.1", "version_affected" : "=" }, { "version_value" : "13.12.2", "version_affected" : "=" }, { "version_value" : "13.13", "version_affected" : "=" }, { "version_value" : "13.13.0", "version_affected" : "=" }, { "version_value" : "13.13.1", "version_affected" : "=" }, { "version_value" : "13.14.0", "version_affected" : "=" }, { "version_value" : "13.14.1", "version_affected" : "=" }, { "version_value" : "13.15.0", "version_affected" : "=" }, { "version_value" : "13.15.1", "version_affected" : "=" }, { "version_value" : "13.16.0", "version_affected" : "=" }, { "version_value" : "13.17.0", "version_affected" : "=" }, { "version_value" : "13.17.1", "version_affected" : "=" }, { "version_value" : "13.17.2", "version_affected" : "=" }, { "version_value" : "13.18.0", "version_affected" : "=" }, { "version_value" : "13.18.1", "version_affected" : "=" }, { "version_value" : "13.18.2", "version_affected" : "=" }, { "version_value" : "13.18.3", "version_affected" : "=" }, { "version_value" : "13.18.4", "version_affected" : "=" }, { "version_value" : "13.18.5", "version_affected" : "=" }, { "version_value" : "13.19.0", "version_affected" : "=" }, { "version_value" : "13.19.1", "version_affected" : "=" }, { "version_value" : "13.19.2", "version_affected" : "=" }, { "version_value" : "13.20.0", "version_affected" : "=" }, { "version_value" : "13.21.0", "version_affected" : "=" }, { "version_value" : "13.21.1", "version_affected" : "=" }, { "version_value" : "13.22.0", "version_affected" : "=" }, { "version_value" : "13.23.0", "version_affected" : "=" }, { "version_value" : "15.0.0", "version_affected" : "=" }, { "version_value" : "15.1.0", "version_affected" : "=" }, { "version_value" : "15.1.1", "version_affected" : "=" }, { "version_value" : "15.1.2", "version_affected" : "=" }, { "version_value" : "15.1.3", "version_affected" : "=" }, { "version_value" : "15.1.4", "version_affected" : "=" }, { "version_value" : "15.1.5", "version_affected" : "=" }, { "version_value" : "15.2.0", "version_affected" : "=" }, { "version_value" : "15.2.1", "version_affected" : "=" }, { "version_value" : "15.2.2", "version_affected" : "=" }, { "version_value" : "15.3.0", "version_affected" : "=" }, { "version_value" : "15.4.0", "version_affected" : "=" }, { "version_value" : "15.4.1", "version_affected" : "=" }, { "version_value" : "15.5.0", "version_affected" : "=" }, { "version_value" : "15.6.0", "version_affected" : "=" }, { "version_value" : "15.6.2", "version_affected" : "=" }, { "version_value" : "15.7.0", "version_affected" : "=" }, { "version_value" : "15.7.1", "version_affected" : "=" }, { "version_value" : "16.0.0", "version_affected" : "=" }, { "version_value" : "16.0.1", "version_affected" : "=" }, { "version_value" : "16.1.0", "version_affected" : "=" }, { "version_value" : "16.2.0", "version_affected" : "=" }, { "version_value" : "16.2.1", "version_affected" : "=" } ] } }, { "product_name" : "certified_asterisk", "version" : { "version_data" : [ { "version_value" : "13.21", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.digium.com/pub/security/AST-2019-002.html", "name" : "http://downloads.digium.com/pub/security/AST-2019-002.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-28447", "name" : "https://issues.asterisk.org/jira/browse/ASTERISK-28447", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.27.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "15.0.0", "versionEndExcluding" : "15.7.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "versionStartIncluding" : "16.0.0", "versionEndExcluding" : "16.4.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:13.21:cert1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:13.21:cert1-rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:13.21:cert1-rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:13.21:cert2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:digium:certified_asterisk:13.21:cert3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-12T20:15Z", "lastModifiedDate" : "2019-07-17T18:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12834", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ht2labs", "product" : { "product_data" : [ { "product_name" : "learning_locker", "version" : { "version_data" : [ { "version_value" : "3.15.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md", "name" : "https://github.com/miruser/Roche-CVEs/blob/master/CVE-2019-12834.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATH_INFO to the dashboards/ URI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ht2labs:learning_locker:3.15.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-18T17:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12838", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schedmd", "product" : { "product_data" : [ { "product_name" : "slurm", "version" : { "version_data" : [ { "version_value" : "17.11.0.1", "version_affected" : "=" }, { "version_value" : "17.11.1.1", "version_affected" : "=" }, { "version_value" : "17.11.1.2", "version_affected" : "=" }, { "version_value" : "17.11.2.1", "version_affected" : "=" }, { "version_value" : "17.11.3.1", "version_affected" : "=" }, { "version_value" : "17.11.3.2", "version_affected" : "=" }, { "version_value" : "17.11.4.1", "version_affected" : "=" }, { "version_value" : "17.11.5.0", "version_affected" : "=" }, { "version_value" : "17.11.5.1", "version_affected" : "=" }, { "version_value" : "17.11.6.1", "version_affected" : "=" }, { "version_value" : "17.11.7.1", "version_affected" : "=" }, { "version_value" : "17.11.8.1", "version_affected" : "=" }, { "version_value" : "17.11.9.1", "version_affected" : "=" }, { "version_value" : "17.11.9.2", "version_affected" : "=" }, { "version_value" : "17.11.10.1", "version_affected" : "=" }, { "version_value" : "17.11.11.1", "version_affected" : "=" }, { "version_value" : "17.11.12.1", "version_affected" : "=" }, { "version_value" : "17.11.13.1", "version_affected" : "=" }, { "version_value" : "17.11.13.2", "version_affected" : "=" }, { "version_value" : "18.08.0.0", "version_affected" : "=" }, { "version_value" : "18.08.0.1", "version_affected" : "=" }, { "version_value" : "18.08.1.1", "version_affected" : "=" }, { "version_value" : "18.08.2.1", "version_affected" : "=" }, { "version_value" : "18.08.3.1", "version_affected" : "=" }, { "version_value" : "18.08.4.1", "version_affected" : "=" }, { "version_value" : "18.08.5.1", "version_affected" : "=" }, { "version_value" : "18.08.5.2", "version_affected" : "=" }, { "version_value" : "18.08.7", "version_affected" : "=" }, { "version_value" : "19.05.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.schedmd.com/pipermail/slurm-announce/2019/", "name" : "https://lists.schedmd.com/pipermail/slurm-announce/2019/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://lists.schedmd.com/pipermail/slurm-announce/2019/000025.html", "name" : "https://lists.schedmd.com/pipermail/slurm-announce/2019/000025.html", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Vendor Advisory" ] }, { "url" : "https://www.schedmd.com/news.php", "name" : "https://www.schedmd.com/news.php", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.schedmd.com/news.php?id=218", "name" : "https://www.schedmd.com/news.php?id=218", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SchedMD Slurm 17.11.x, 18.08.0 through 18.08.7, and 19.05.0 allows SQL Injection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*", "versionStartExcluding" : "17.11.0.0", "versionEndIncluding" : "17.11.13.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schedmd:slurm:*:*:*:*:*:*:*:*", "versionStartExcluding" : "18.08.0", "versionEndIncluding" : "18.08.7" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schedmd:slurm:19.05.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T13:15Z", "lastModifiedDate" : "2019-07-17T18:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12876", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zohocorp", "product" : { "product_data" : [ { "product_name" : "manageengine_admanager_plus", "version" : { "version_data" : [ { "version_value" : "6.6.5", "version_affected" : "=" } ] } }, { "product_name" : "manageengine_adselfservice_plus", "version" : { "version_data" : [ { "version_value" : "5.7", "version_affected" : "=" } ] } }, { "product_name" : "manageengine_desktop_central", "version" : { "version_data" : [ { "version_value" : "10.0.380", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109298", "name" : "109298", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/", "name" : "https://www.criticalstart.com/2019/07/manageengine-privilege-escalation/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zoho ManageEngine ADManager Plus 6.6.5, ADSelfService Plus 5.7, and DesktopCentral 10.0.380 have Insecure Permissions, leading to Privilege Escalation from low level privileges to System." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_admanager_plus:6.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zohocorp:manageengine_desktop_central:10.0.380:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.3, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.3, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-19T17:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12911", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12912", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rdbrck", "product" : { "product_data" : [ { "product_name" : "shift", "version" : { "version_data" : [ { "version_value" : "3.4.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-426" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rdbrck:shift:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.4.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-19T20:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12913", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rdbrck", "product" : { "product_data" : [ { "product_name" : "shift", "version" : { "version_data" : [ { "version_value" : "3.4.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-254" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rdbrck:shift:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.4.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-19T20:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12914", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12923", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "name" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "name" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "6.0", "versionEndExcluding" : "6.90" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "7.62" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "8.00", "versionEndExcluding" : "8.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.83" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "10.00", "versionEndExcluding" : "10.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-08T21:15Z", "lastModifiedDate" : "2019-07-16T15:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12924", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-611" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "name" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "name" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity Injection (XXE) attacks that could be exploited by an unauthenticated user. It was possible for an attacker to use a vulnerability in the configuration of the XML processor to read any file on the host system. Because all credentials were stored in a cleartext file, it was possible to steal all users' credentials (including the highest privileged users)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "6.0", "versionEndExcluding" : "6.90" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "7.62" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "8.00", "versionEndExcluding" : "8.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.83" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "10.00", "versionEndExcluding" : "10.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-08T21:15Z", "lastModifiedDate" : "2019-07-16T15:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12925", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "name" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "name" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal issues, with which authenticated users could add, remove, or potentially read files in arbitrary folders accessible by the IIS user. This could lead to reading other users' credentials including those of SYSADMIN accounts, reading other users' emails, or adding emails or files to other users' accounts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "6.0", "versionEndExcluding" : "6.90" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "7.62" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "8.00", "versionEndExcluding" : "8.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.83" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "10.00", "versionEndExcluding" : "10.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-08T22:15Z", "lastModifiedDate" : "2019-07-16T15:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12926", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "name" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "name" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas within the application for which the accounts used were supposed to have insufficient access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "6.0", "versionEndExcluding" : "6.90" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "7.62" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "8.00", "versionEndExcluding" : "8.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.83" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "10.00", "versionEndExcluding" : "10.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-08T22:15Z", "lastModifiedDate" : "2019-07-16T16:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12927", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "name" : "http://www.mailenable.com/Premium-ReleaseNotes.txt", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "name" : "https://www.nccgroup.trust/uk/our-research/technical-advisory-multiple-vulnerabilities-in-mailenable/", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected cross-site scripting (XSS) attacks. Because the session cookie did not use the HttpOnly flag, it was possible to hijack the session cookie by exploiting this vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "6.0", "versionEndExcluding" : "6.90" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "7.62" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "8.00", "versionEndExcluding" : "8.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.83" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailenable:mailenable:*:*:*:*:premium:*:*:*", "versionStartIncluding" : "10.00", "versionEndExcluding" : "10.24" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-08T22:15Z", "lastModifiedDate" : "2019-07-11T13:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12945", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T17:15Z", "lastModifiedDate" : "2019-07-19T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12946", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.contentsecurity.com.au/security-advisory-elcom-cms-sql-injection", "name" : "https://blog.contentsecurity.com.au/security-advisory-elcom-cms-sql-injection", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Elcom CMS before 10.7 has SQL Injection via EventSearchByState.aspx and EventSearchAdv.aspx." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T14:15Z", "lastModifiedDate" : "2019-07-19T15:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12971", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://seclists.org/bugtraq/2019/Jul/6", "name" : "https://seclists.org/bugtraq/2019/Jul/6", "refsource" : "MISC", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BKS EBK Ethernet-Buskoppler Pro before 3.01 allows Unrestricted Upload of a File with a Dangerous Type." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:g-u:bks_ebk_ethernet-buskoppler_pro_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.01" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:g-u:bks_ebk_ethernet-buskoppler_pro:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-15T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12985", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12986", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12987", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12988", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12989", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html", "name" : "http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-32", "name" : "https://www.tenable.com/security/research/tra-2019-32", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12990", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/search?searchQuery=*&lang=en&sort=relevance&prod=&pver=&ct=Security+Bulletin", "name" : "https://support.citrix.com/search?searchQuery=*&lang=en&sort=relevance&prod=&pver=&ct=Security+Bulletin", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12991", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html", "name" : "http://packetstormsecurity.com/files/153638/Citrix-SD-WAN-Appliance-10.2.2-Authentication-Bypass-Remote-Command-Execution.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-32", "name" : "https://www.tenable.com/security/research/tra-2019-32", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-12992", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109133", "name" : "109133", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.citrix.com/article/CTX251987", "name" : "https://support.citrix.com/article/CTX251987", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.tenable.com/security/research/tra-2019-31", "name" : "https://www.tenable.com/security/research/tra-2019-31", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:netscaler_sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.0", "versionEndExcluding" : "10.0.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:citrix:sd-wan:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.2", "versionEndExcluding" : "10.2.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-17T13:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13027", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realization", "product" : { "product_data" : [ { "product_name" : "concerto_critical_chain_planner", "version" : { "version_data" : [ { "version_value" : "5.10.8071", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/IckoGZ/CVE-2019-13027/blob/master/README.md", "name" : "https://github.com/IckoGZ/CVE-2019-13027/blob/master/README.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Realization Concerto Critical Chain Planner (aka CCPM) 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realization:concerto_critical_chain_planner:5.10.8071:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-12T15:15Z", "lastModifiedDate" : "2019-07-15T12:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13029", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.html", "name" : "http://packetstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://gitlab.com/snippets/1874216", "name" : "https://gitlab.com/snippets/1874216", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.0", "versionEndExcluding" : "8.10.20" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*", "versionStartIncluding" : "9.0", "versionEndExcluding" : "9.1.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-19T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13071", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cyberpowersystems", "product" : { "product_data" : [ { "product_name" : "powerpanel", "version" : { "version_data" : [ { "version_value" : "3.4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html", "name" : "http://packetstormsecurity.com/files/153581/PowerPanel-Business-Edition-3.4.0-Cross-Site-Request-Forgery.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jul/11", "name" : "20190709 PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cyberpowersystems:powerpanel:3.4.0:*:*:*:business:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-17T15:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13115", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.semmle.com/libssh2-integer-overflow/", "name" : "https://blog.semmle.com/libssh2-integer-overflow/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa", "name" : "https://github.com/libssh2/libssh2/compare/02ecf17...42d37aa", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/libssh2/libssh2/pull/350", "name" : "https://github.com/libssh2/libssh2/pull/350", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://libssh2.org/changes.html", "name" : "https://libssh2.org/changes.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server. This is related to an _libssh2_check_length mistake, and is different from the various issues fixed in 1.8.1, such as CVE-2019-3855." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-18T19:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ozlabs", "product" : { "product_data" : [ { "product_name" : "patchwork", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jk.ozlabs.org/projects/patchwork/", "name" : "http://jk.ozlabs.org/projects/patchwork/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2019/07/05/1", "name" : "[oss-security] 20190705 CVE-2019-13122: Patchwork: XSS via Message-ID", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://github.com/getpatchwork/patchwork/commits/master", "name" : "https://github.com/getpatchwork/patchwork/commits/master", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/getpatchwork/patchwork/releases", "name" : "https://github.com/getpatchwork/patchwork/releases", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/005870.html", "name" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/005870.html", "refsource" : "MISC", "tags" : [ "Mailing List", "Vendor Advisory" ] }, { "url" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/005878.html", "name" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/005878.html", "refsource" : "MISC", "tags" : [ "Mailing List", "Vendor Advisory" ] }, { "url" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/date.html", "name" : "https://lists.ozlabs.org/pipermail/patchwork/2019-July/date.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Cross Site Scripting (XSS) vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msgid in templatetags/patch.py. Patchwork versions v2.1.4 and v2.0.4 will contain the fix." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ozlabs:patchwork:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.1", "versionEndExcluding" : "2.0.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ozlabs:patchwork:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.1.0", "versionEndExcluding" : "2.1.4" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ozlabs:patchwork:2.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ozlabs:patchwork:2.1.0:rc2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T16:48Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13132", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeromq", "product" : { "product_data" : [ { "product_name" : "libzmq", "version" : { "version_data" : [ { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.2.4", "version_affected" : "=" }, { "version_value" : "4.2.5", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "16.04", "version_affected" : "=" }, { "version_value" : "18.04", "version_affected" : "=" }, { "version_value" : "18.10", "version_affected" : "=" }, { "version_value" : "19.04", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/08/6", "name" : "[oss-security] 20190708 CVE-2019-13132: zeromq/libzmq: denial of service via stack overflow with arbitrary data", "refsource" : "MLIST", "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109284", "name" : "109284", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://github.com/zeromq/libzmq/issues/3558", "name" : "https://github.com/zeromq/libzmq/issues/3558", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/zeromq/libzmq/releases", "name" : "https://github.com/zeromq/libzmq/releases", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://lists.debian.org/debian-lts-announce/2019/07/msg00007.html", "name" : "[debian-lts-announce] 20190708 [SECURITY] [DLA 1849-1] zeromq3 security update", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/13", "name" : "20190709 [SECURITY] [DSA 4477-1] zeromq3 security update", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://usn.ubuntu.com/4050-1/", "name" : "USN-4050-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.debian.org/security/2019/dsa-4477", "name" : "DSA-4477", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In ZeroMQ libzmq before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.3.2, a remote, unauthenticated client connecting to a libzmq application, running with a socket listening with CURVE encryption/authentication enabled, may cause a stack overflow and overwrite the stack with arbitrary data, due to a buffer overflow in the library. Users running public servers with the above configuration are highly encouraged to upgrade as soon as possible, as there are no known mitigations." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeromq:libzmq:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.0.9" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeromq:libzmq:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.1.0", "versionEndExcluding" : "4.1.7" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeromq:libzmq:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.2.0", "versionEndExcluding" : "4.3.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T19:15Z", "lastModifiedDate" : "2019-07-18T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13142", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "razer", "product" : { "product_data" : [ { "product_name" : "surround", "version" : { "version_data" : [ { "version_value" : "1.1.63.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c", "name" : "https://posts.specterops.io/cve-2019-13142-razer-surround-1-1-63-0-eop-f18c52b8be0c", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\\Razer\\Synapse\\Devices\\Razer Surround\\Driver\\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:razer:surround:1.1.63.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 9.2, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T18:15Z", "lastModifiedDate" : "2019-07-15T19:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13146", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "field_test_project", "product" : { "product_data" : [ { "product_name" : "field_test", "version" : { "version_data" : [ { "version_value" : "0.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109114", "name" : "109114", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/ankane/field_test/issues/17", "name" : "https://github.com/ankane/field_test/issues/17", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://rubygems.org/gems/field_test", "name" : "https://rubygems.org/gems/field_test", "refsource" : "MISC", "tags" : [ "Product", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can be made to return any input, which can be dangerous depending on how applications use it. If an application treats arbitrary variants as trusted, this can lead to a variety of potential vulnerabilities like SQL injection or cross-site scripting (XSS)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:field_test_project:field_test:0.3.0:*:*:*:*:ruby:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T18:15Z", "lastModifiedDate" : "2019-07-16T13:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13161", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.digium.com/pub/security/AST-2019-003.html", "name" : "http://downloads.digium.com/pub/security/AST-2019-003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-28465", "name" : "https://issues.asterisk.org/jira/browse/ASTERISK-28465", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T20:15Z", "lastModifiedDate" : "2019-07-13T01:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13164", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "qemu", "product" : { "product_data" : [ { "product_name" : "qemu", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-254" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.openwall.com/lists/oss-security/2019/07/02/2", "name" : "[oss-security] 20190703 CVE-2019-13164 Qemu: qemu-bridge-helper ACL bypassed with long interface names", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109054", "name" : "109054", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://lists.gnu.org/archive/html/qemu-devel/2019-07/msg00145.html", "name" : "https://lists.gnu.org/archive/html/qemu-devel/2019-07/msg00145.html", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "qemu-bridge-helper.c in QEMU 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T14:15Z", "lastModifiedDate" : "2019-07-12T14:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13177", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-347" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/apragacz/django-rest-registration/releases/tag/0.5.0", "name" : "https://github.com/apragacz/django-rest-registration/releases/tag/0.5.0", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://github.com/apragacz/django-rest-registration/security/advisories/GHSA-p3w6-jcg4-52xh", "name" : "https://github.com/apragacz/django-rest-registration/security/advisories/GHSA-p3w6-jcg4-52xh", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "verification.py in django-rest-registration (aka Django REST Registration library) before 0.5.0 relies on a static string for signatures (i.e., the Django Signing API is misused), which allows remote attackers to spoof the verification process. This occurs because incorrect code refactoring led to calling a security-critical function with an incorrect argument." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:django-rest-registration_project:django-rest-registration:*:*:*:*:*:django:*:*", "versionStartExcluding" : "0.1.0", "versionEndExcluding" : "0.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T22:15Z", "lastModifiedDate" : "2019-07-12T13:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13178", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "calamares", "product" : { "product_data" : [ { "product_name" : "calamares", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "3.1.13", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095", "name" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096", "name" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1726565", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1726565", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://calamares.io/calamares-3.2.11-is-out/", "name" : "https://calamares.io/calamares-3.2.11-is-out/", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://calamares.io/calamares-cve-2019/", "name" : "https://calamares.io/calamares-cve-2019/", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/calamares/calamares/issues/1190", "name" : "https://github.com/calamares/calamares/issues/1190", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://github.com/calamares/calamares/issues/1191", "name" : "https://github.com/calamares/calamares/issues/1191", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://www.pavelkogan.com/2014/05/23/luks-full-disk-encryption/", "name" : "https://www.pavelkogan.com/2014/05/23/luks-full-disk-encryption/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.pavelkogan.com/2015/01/25/linux-mint-encryption/", "name" : "https://www.pavelkogan.com/2015/01/25/linux-mint-encryption/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:calamares:calamares:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.1", "versionEndIncluding" : "3.2.10" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T23:15Z", "lastModifiedDate" : "2019-07-12T14:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13179", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "calamares", "product" : { "product_data" : [ { "product_name" : "calamares", "version" : { "version_data" : [ { "version_value" : "3.2.10", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-275" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095", "name" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835095", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096", "name" : "https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/1835096", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1726542", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1726542", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://calamares.io/calamares-3.2.11-is-out/", "name" : "https://calamares.io/calamares-3.2.11-is-out/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://calamares.io/calamares-cve-2019/", "name" : "https://calamares.io/calamares-cve-2019/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://github.com/calamares/calamares/issues/1191", "name" : "https://github.com/calamares/calamares/issues/1191", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Calamares versions 3.1 through 3.2.10 copies a LUKS encryption keyfile from /crypto_keyfile.bin (mode 0600 owned by root) to /boot within a globally readable initramfs image with insecure permissions, which allows this originally protected file to be read by any user, thereby disclosing decryption keys for LUKS containers created with Full Disk Encryption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:calamares:calamares:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.2.10" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T23:15Z", "lastModifiedDate" : "2019-07-15T13:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13207", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nlnetlabs", "product" : { "product_data" : [ { "product_name" : "name_server_daemon", "version" : { "version_data" : [ { "version_value" : "4.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/NLnetLabs/nsd/issues/20", "name" : "https://github.com/NLnetLabs/nsd/issues/20", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dname_concatenate() function in dname.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nlnetlabs:name_server_daemon:4.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T20:15Z", "lastModifiedDate" : "2019-07-11T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13224", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oniguruma_project", "product" : { "product_data" : [ { "product_name" : "oniguruma", "version" : { "version_data" : [ { "version_value" : "6.9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-416" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55", "name" : "https://github.com/kkos/oniguruma/commit/0f7f61ed1b7b697e283e37bd2d731d0bd57adb55", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://lists.debian.org/debian-lts-announce/2019/07/msg00013.html", "name" : "[debian-lts-announce] 20190717 [SECURITY] [DLA 1854-1] libonig security update", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string, with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oniguruma_project:oniguruma:6.9.2:-:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-17T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13225", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oniguruma_project", "product" : { "product_data" : [ { "product_name" : "oniguruma", "version" : { "version_data" : [ { "version_value" : "6.9.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-476" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c", "name" : "https://github.com/kkos/oniguruma/commit/c509265c5f6ae7264f7b8a8aae1cfa5fc59d108c", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providing a crafted regular expression. Oniguruma issues often affect Ruby, as well as common optional libraries for PHP and Rust." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oniguruma_project:oniguruma:6.9.2:-:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-11T20:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13240", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "glpi-project", "product" : { "product_data" : [ { "product_name" : "glpi", "version" : { "version_data" : [ { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.20", "version_affected" : "=" }, { "version_value" : "0.20.1", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" }, { "version_value" : "0.30", "version_affected" : "=" }, { "version_value" : "0.31", "version_affected" : "=" }, { "version_value" : "0.40", "version_affected" : "=" }, { "version_value" : "0.41", "version_affected" : "=" }, { "version_value" : "0.42", "version_affected" : "=" }, { "version_value" : "0.50", "version_affected" : "=" }, { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.51a", "version_affected" : "=" }, { "version_value" : "0.60", "version_affected" : "=" }, { "version_value" : "0.65", "version_affected" : "=" }, { "version_value" : "0.68", "version_affected" : "=" }, { "version_value" : "0.68.1", "version_affected" : "=" }, { "version_value" : "0.68.2", "version_affected" : "=" }, { "version_value" : "0.68.3", "version_affected" : "=" }, { "version_value" : "0.68.3-2", "version_affected" : "=" }, { "version_value" : "0.70", "version_affected" : "=" }, { "version_value" : "0.70.1", "version_affected" : "=" }, { "version_value" : "0.70.2", "version_affected" : "=" }, { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "0.71.1", "version_affected" : "=" }, { "version_value" : "0.71.2", "version_affected" : "=" }, { "version_value" : "0.71.3", "version_affected" : "=" }, { "version_value" : "0.71.4", "version_affected" : "=" }, { "version_value" : "0.71.5", "version_affected" : "=" }, { "version_value" : "0.71.6", "version_affected" : "=" }, { "version_value" : "0.72", "version_affected" : "=" }, { "version_value" : "0.72.1", "version_affected" : "=" }, { "version_value" : "0.72.2", "version_affected" : "=" }, { "version_value" : "0.72.3", "version_affected" : "=" }, { "version_value" : "0.72.4", "version_affected" : "=" }, { "version_value" : "0.72.21", "version_affected" : "=" }, { "version_value" : "0.78", "version_affected" : "=" }, { "version_value" : "0.78.1", "version_affected" : "=" }, { "version_value" : "0.78.2", "version_affected" : "=" }, { "version_value" : "0.78.3", "version_affected" : "=" }, { "version_value" : "0.78.4", "version_affected" : "=" }, { "version_value" : "0.78.5", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" }, { "version_value" : "0.80.1", "version_affected" : "=" }, { "version_value" : "0.80.2", "version_affected" : "=" }, { "version_value" : "0.80.3", "version_affected" : "=" }, { "version_value" : "0.80.4", "version_affected" : "=" }, { "version_value" : "0.80.5", "version_affected" : "=" }, { "version_value" : "0.80.6", "version_affected" : "=" }, { "version_value" : "0.80.7", "version_affected" : "=" }, { "version_value" : "0.80.61", "version_affected" : "=" }, { "version_value" : "0.83", "version_affected" : "=" }, { "version_value" : "0.83.1", "version_affected" : "=" }, { "version_value" : "0.83.2", "version_affected" : "=" }, { "version_value" : "0.83.3", "version_affected" : "=" }, { "version_value" : "0.83.4", "version_affected" : "=" }, { "version_value" : "0.83.5", "version_affected" : "=" }, { "version_value" : "0.83.6", "version_affected" : "=" }, { "version_value" : "0.83.7", "version_affected" : "=" }, { "version_value" : "0.83.8", "version_affected" : "=" }, { "version_value" : "0.83.9", "version_affected" : "=" }, { "version_value" : "0.83.31", "version_affected" : "=" }, { "version_value" : "0.83.91", "version_affected" : "=" }, { "version_value" : "0.84", "version_affected" : "=" }, { "version_value" : "0.84.1", "version_affected" : "=" }, { "version_value" : "0.84.2", "version_affected" : "=" }, { "version_value" : "0.84.3", "version_affected" : "=" }, { "version_value" : "0.84.4", "version_affected" : "=" }, { "version_value" : "0.84.5", "version_affected" : "=" }, { "version_value" : "0.84.6", "version_affected" : "=" }, { "version_value" : "0.84.7", "version_affected" : "=" }, { "version_value" : "0.84.8", "version_affected" : "=" }, { "version_value" : "0.85", "version_affected" : "=" }, { "version_value" : "0.85.1", "version_affected" : "=" }, { "version_value" : "0.85.2", "version_affected" : "=" }, { "version_value" : "0.85.3", "version_affected" : "=" }, { "version_value" : "0.85.4", "version_affected" : "=" }, { "version_value" : "0.85.5", "version_affected" : "=" }, { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.90.1", "version_affected" : "=" }, { "version_value" : "0.90.2", "version_affected" : "=" }, { "version_value" : "0.90.3", "version_affected" : "=" }, { "version_value" : "0.90.4", "version_affected" : "=" }, { "version_value" : "0.90.5", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.1.4", "version_affected" : "=" }, { "version_value" : "9.1.5", "version_affected" : "=" }, { "version_value" : "9.1.6", "version_affected" : "=" }, { "version_value" : "9.1.7", "version_affected" : "=" }, { "version_value" : "9.1.7.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-640" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/glpi-project/glpi/commit/5da9f99b2d81713b1e36016b47ce656a33648bc7", "name" : "https://github.com/glpi-project/glpi/commit/5da9f99b2d81713b1e36016b47ce656a33648bc7", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/glpi-project/glpi/commit/86a43ae47b3dd844947f40a2ffcf1a36e53dbba6", "name" : "https://github.com/glpi-project/glpi/commit/86a43ae47b3dd844947f40a2ffcf1a36e53dbba6", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/glpi-project/glpi/compare/1783b78...8e621f6", "name" : "https://github.com/glpi-project/glpi/compare/1783b78...8e621f6", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/glpi-project/glpi/releases/tag/9.4.1", "name" : "https://github.com/glpi-project/glpi/releases/tag/9.4.1", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.synacktiv.com/ressources/advisories/GLPI_9.4.0_unsafe_reset.pdf", "name" : "https://www.synacktiv.com/ressources/advisories/GLPI_9.4.0_unsafe_reset.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*", "versionEndExcluding" : "9.4.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-17T14:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13272", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153663/Linux-PTRACE_TRACEME-Broken-Permission-Object-Lifetime-Handling.html", "name" : "http://packetstormsecurity.com/files/153663/Linux-PTRACE_TRACEME-Broken-Permission-Object-Lifetime-Handling.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1903", "name" : "https://bugs.chromium.org/p/project-zero/issues/detail?id=1903", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1730895", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1730895", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1140671", "name" : "https://bugzilla.suse.com/show_bug.cgi?id=1140671", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17", "name" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.17", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee", "name" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6994eefb0053799d2e07cd140df6c2ea106c41ee", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee", "name" : "https://github.com/torvalds/linux/commit/6994eefb0053799d2e07cd140df6c2ea106c41ee", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGRK5LYWBJ4E4SRI4DKX367NHYSI3VOH/", "name" : "FEDORA-2019-a95015e60f", "refsource" : "FEDORA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T13:15Z", "lastModifiedDate" : "2019-07-18T11:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13276", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trendnet", "product" : { "product_data" : [ { "product_name" : "tew-827dru_firmware", "version" : { "version_data" : [ { "version_value" : "2.04b03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13276", "name" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13276", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow in the ssi binary. The overflow allows an unauthenticated user to execute arbitrary code by providing a sufficiently long query string when POSTing to any valid cgi, txt, asp, or js file. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.04b03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T16:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13277", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trendnet", "product" : { "product_data" : [ { "product_name" : "tew-827dru_firmware", "version" : { "version_data" : [ { "version_value" : "2.04b03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277", "name" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13277", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values, potentially leading to a denial of service. The request can be made on the local intranet or remotely if remote administration is enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.04b03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-15T20:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13278", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trendnet", "product" : { "product_data" : [ { "product_name" : "tew-827dru_firmware", "version" : { "version_data" : [ { "version_value" : "2.04b03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13278", "name" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13278", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple command injections when processing user input for the setup wizard, allowing an unauthenticated user to run arbitrary commands on the device. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.04b03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T16:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13279", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trendnet", "product" : { "product_data" : [ { "product_name" : "tew-827dru_firmware", "version" : { "version_data" : [ { "version_value" : "2.04b03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13279", "name" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13279", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains multiple stack-based buffer overflows when processing user input for the setup wizard, allowing an unauthenticated user to execute arbitrary code. The vulnerability can be exercised on the local intranet or remotely if remote administration is enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.04b03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T17:15Z", "lastModifiedDate" : "2019-07-16T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13280", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trendnet", "product" : { "product_data" : [ { "product_name" : "tew-827dru_firmware", "version" : { "version_data" : [ { "version_value" : "2.04b03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280", "name" : "https://github.com/fuzzywalls/TRENDNetExploits/tree/master/CVE-2019-13280", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "TRENDnet TEW-827DRU with firmware up to and including 2.04B03 contains a stack-based buffer overflow while returning an error message to the user about failure to resolve a hostname during a ping or traceroute attempt. This allows an authenticated user to execute arbitrary code. The exploit can be exercised on the local intranet or remotely if remote administration is enabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:trendnet:tew-827dru_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.04b03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:trendnet:tew-827dru:2.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T19:15Z", "lastModifiedDate" : "2019-07-15T19:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13337", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "weseek", "product" : { "product_data" : [ { "product_name" : "growi", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" }, { "version_value" : "1.2.14", "version_affected" : "=" }, { "version_value" : "1.2.15", "version_affected" : "=" }, { "version_value" : "1.2.16", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "3.1.13", "version_affected" : "=" }, { "version_value" : "3.1.14", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c", "name" : "https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL parameter access_token (this is the parameter used by the API). No valid token is required since it is not validated by the backend. The website can then be browsed as if no basic authentication is required." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T20:15Z", "lastModifiedDate" : "2019-07-16T13:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13338", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "weseek", "product" : { "product_data" : [ { "product_name" : "growi", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" }, { "version_value" : "1.2.14", "version_affected" : "=" }, { "version_value" : "1.2.15", "version_affected" : "=" }, { "version_value" : "1.2.16", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.1.7", "version_affected" : "=" }, { "version_value" : "3.1.8", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "3.1.13", "version_affected" : "=" }, { "version_value" : "3.1.14", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "3.2.8", "version_affected" : "=" }, { "version_value" : "3.2.9", "version_affected" : "=" }, { "version_value" : "3.2.10", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.3.10", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c", "name" : "https://gist.github.com/polkaman/d039fb5236a043907e44efc198d9161c", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a page by leveraging wiki access to make API calls for page metadata. In other words, the password hash can be retrieved even though it is not a publicly available field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T20:15Z", "lastModifiedDate" : "2019-07-16T13:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13346", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "myt_project", "product" : { "product_data" : [ { "product_name" : "myt", "version" : { "version_data" : [ { "version_value" : "1.5.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.exploit-db.com/exploits/47109", "name" : "47109", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In MyT 1.5.1, the User[username] parameter has XSS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:myt_project:myt:1.5.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-18T12:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13351", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alsa-project", "product" : { "product_data" : [ { "product_name" : "alsa", "version" : { "version_data" : [ { "version_value" : "1.1.7", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-415" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/jackaudio/jack2/pull/480", "name" : "https://github.com/jackaudio/jack2/pull/480", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/xbmc/xbmc/issues/16258", "name" : "https://github.com/xbmc/xbmc/issues/16258", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a \"double file descriptor close\" issue during a failed connection attempt when jackd2 is not running. Exploitation success depends on multithreaded timing of that double close, which can result in unintended information disclosure, crashes, or file corruption due to having the wrong file associated with the file descriptor." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jackaudio:jack2:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.9.1", "versionEndIncluding" : "1.9.12" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alsa-project:alsa:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.1, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-11T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13352", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wolfvision", "product" : { "product_data" : [ { "product_name" : "cynap", "version" : { "version_data" : [ { "version_value" : "1.06", "version_affected" : "=" }, { "version_value" : "1.08g", "version_affected" : "=" }, { "version_value" : "1.10i", "version_affected" : "=" }, { "version_value" : "1.14", "version_affected" : "=" }, { "version_value" : "1.15e", "version_affected" : "=" }, { "version_value" : "1.16g", "version_affected" : "=" }, { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.18g", "version_affected" : "=" }, { "version_value" : "1.19d", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.20i", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.22", "version_affected" : "=" }, { "version_value" : "1.24", "version_affected" : "=" }, { "version_value" : "1.26g", "version_affected" : "=" }, { "version_value" : "1.28", "version_affected" : "=" }, { "version_value" : "1.28j", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-798" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153530/WolfVision-Cynap-1.18g-1.28j-Hardcoded-Credential.html", "name" : "http://packetstormsecurity.com/files/153530/WolfVision-Cynap-1.18g-1.28j-Hardcoded-Credential.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jul/9", "name" : "20190709 UPDATE: [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321) [CVE-2019-13352]", "refsource" : "FULLDISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-021.txt", "name" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-021.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wolfvision:cynap:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.30j" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T20:15Z", "lastModifiedDate" : "2019-07-15T16:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13358", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "opencats", "product" : { "product_data" : [ { "product_name" : "opencats", "version" : { "version_data" : [ { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.9.3-1", "version_affected" : "=" }, { "version_value" : "0.9.3-2", "version_affected" : "=" }, { "version_value" : "0.9.3-3", "version_affected" : "=" }, { "version_value" : "0.9.4", "version_affected" : "=" }, { "version_value" : "0.9.4-1", "version_affected" : "=" }, { "version_value" : "0.9.4-2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-611" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.opencats.org/news/", "name" : "http://www.opencats.org/news/", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://doddsecurity.com/312/xml-external-entity-injection-xxe-in-opencats-applicant-tracking-system/", "name" : "https://doddsecurity.com/312/xml-external-entity-injection-xxe-in-opencats-applicant-tracking-system/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/opencats/OpenCATS/pull/440", "name" : "https://github.com/opencats/OpenCATS/pull/440", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.9.4-3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-05T21:15Z", "lastModifiedDate" : "2019-07-11T13:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13359", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "centos-webpanel", "product" : { "product_data" : [ { "product_name" : "centos_web_panel", "version" : { "version_data" : [ { "version_value" : "0.9.8.836", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153666/CentOS-Control-Web-Panel-0.9.8.836-Privilege-Escalation.html", "name" : "http://packetstormsecurity.com/files/153666/CentOS-Control-Web-Panel-0.9.8.836-Privilege-Escalation.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13359.md", "name" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13359.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:centos-webpanel:centos_web_panel:0.9.8.836:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.6, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T18:15Z", "lastModifiedDate" : "2019-07-18T14:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13360", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "centos-webpanel", "product" : { "product_data" : [ { "product_name" : "centos_web_panel", "version" : { "version_data" : [ { "version_value" : "0.9.8.836", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html", "name" : "http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13360.md", "name" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13360.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:centos-webpanel:centos_web_panel:0.9.8.836:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-18T14:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13372", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "central_wifimanager", "version" : { "version_data" : [ { "version_value" : "1.03", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)-Multiple-Vulnerabilities.md", "name" : "https://github.com/unh3x/unh3x.github.io/blob/master/_posts/2019-02-21-D-link-(CWM-100)-Multiple-Vulnerabilities.md", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117", "name" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10117", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities/", "name" : "https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dlink:central_wifimanager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.03" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T23:15Z", "lastModifiedDate" : "2019-07-12T15:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13379", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/", "name" : "https://jordonlovik.wordpress.com/2019/07/06/roomalert-by-avtech-critical-vulnerability-disclosure/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.youtube.com/watch?v=X1PY7kMFkVg", "name" : "https://www.youtube.com/watch?v=X1PY7kMFkVg", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On AVTECH Room Alert 3E devices before 2.2.5, an attacker with access to the device's web interface may escalate privileges from an unauthenticated user to administrator by performing a cmd.cgi?action=ResetDefaults&src=RA reset and using the default credentials to get in." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:avtech:room_alert_3e_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.2.5" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:avtech:room_alert_3e:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-07T16:15Z", "lastModifiedDate" : "2019-07-15T17:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13383", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "centos-webpanel", "product" : { "product_data" : [ { "product_name" : "centos_web_panel", "version" : { "version_data" : [ { "version_value" : "0.9.8.836", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html", "name" : "http://packetstormsecurity.com/files/153667/CentOS-Control-Web-Panel-0.9.8.838-User-Enumeration.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13383.md", "name" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13383.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.846, the Login process allows attackers to check whether a username is valid by reading the HTTP response." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:centos-webpanel:centos_web_panel:0.9.8.836:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-18T14:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13396", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "getflightpath", "product" : { "product_data" : [ { "product_name" : "flightpath", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.2.3", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.4", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.4.4", "version_affected" : "=" }, { "version_value" : "4.4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.5", "version_affected" : "=" }, { "version_value" : "4.4.6", "version_affected" : "=" }, { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.5.1", "version_affected" : "=" }, { "version_value" : "4.6", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.7", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.2.1", "version_affected" : "=" }, { "version_value" : "4.8", "version_affected" : "=" }, { "version_value" : "4.8.1", "version_affected" : "=" }, { "version_value" : "4.8.2", "version_affected" : "=" }, { "version_value" : "4.8.3", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://getflightpath.com/node/2650", "name" : "http://getflightpath.com/node/2650", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://packetstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.html", "name" : "http://packetstormsecurity.com/files/153626/FlightPath-Local-File-Inclusion.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion through the form_include parameter in an index.php?q=system-handle-form-submit POST request because of an include_once in system_handle_form_submit in modules/system/system.module." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.0", "versionEndIncluding" : "4.8.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:dev1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:dev2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:getflightpath:flightpath:5.0:rc3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T14:15Z", "lastModifiedDate" : "2019-07-17T16:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13403", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "temenos", "product" : { "product_data" : [ { "product_name" : "cwx", "version" : { "version_data" : [ { "version_value" : "8.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/B3Bo1d/CVE-2019-13403/", "name" : "https://github.com/B3Bo1d/CVE-2019-13403/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Temenos CWX version 8.9 has an Broken Access Control vulnerability in the module /CWX/Employee/EmployeeEdit2.aspx, leading to the viewing of user information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:temenos:cwx:8.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-18T19:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13404", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "python", "product" : { "product_data" : [ { "product_name" : "python", "version" : { "version_data" : [ { "version_value" : "2.7.16", "version_affected" : "<=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.2150", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.2150", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.python.org/2/faq/windows.html", "name" : "https://docs.python.org/2/faq/windows.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** The MSI installer for Python through 2.7.16 on Windows defaults to the C:\\Python27 directory, which makes it easier for local users to deploy Trojan horse code. (This also affects old 3.x releases before 3.5.) NOTE: the vendor's position is that it is the user's responsibility to ensure C:\\Python27 access control or choose a different directory, because backwards compatibility requires that C:\\Python27 remain the default for 2.7.x." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.7.16" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndExcluding" : "3.5.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-08T01:15Z", "lastModifiedDate" : "2019-07-15T15:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13446", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T12:15Z", "lastModifiedDate" : "2019-07-17T12:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13447", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sertek", "product" : { "product_data" : [ { "product_name" : "xpare", "version" : { "version_data" : [ { "version_value" : "3.67", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/", "name" : "https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sertek:xpare:3.67:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-18T15:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13448", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sertek", "product" : { "product_data" : [ { "product_name" : "xpare", "version" : { "version_data" : [ { "version_value" : "3.67", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/", "name" : "https://cyberoo.com/2019/07/16/cyberoo-identifica-vulnerabilita-0day/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could exploit the vulnerable function in order to prepare an XSS payload to send to the product's clients." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sertek:xpare:3.67:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-18T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13449", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf", "name" : "https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/", "name" : "https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=951540", "name" : "https://bugs.chromium.org/p/chromium/issues/detail?id=951540", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5", "name" : "https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://twitter.com/zoom_us/status/1148710712241295361", "name" : "https://twitter.com/zoom_us/status/1148710712241295361", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the Zoom Client before 4.4.2 on macOS, remote attackers can cause a denial of service (continual focus grabs) via a sequence of invalid launch?action=join&confno= requests to localhost port 19421." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:mac_os_x:*:*", "versionEndExcluding" : "4.4.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-09T06:15Z", "lastModifiedDate" : "2019-07-17T00:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13450", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ringcentral", "product" : { "product_data" : [ { "product_name" : "ringcentral", "version" : { "version_data" : [ { "version_value" : "7.0.136380.0312", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "zoom", "product" : { "product_data" : [ { "product_name" : "zoom", "version" : { "version_data" : [ { "version_value" : "4.4.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109082", "name" : "109082", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf", "name" : "https://assets.zoom.us/docs/pdf/Zoom+Response+Video-On+Vulnerability.pdf", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/", "name" : "https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugs.chromium.org/p/chromium/issues/detail?id=951540", "name" : "https://bugs.chromium.org/p/chromium/issues/detail?id=951540", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5", "name" : "https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://news.ycombinator.com/item?id=20387298", "name" : "https://news.ycombinator.com/item?id=20387298", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://twitter.com/moreati/status/1148548799813640193", "name" : "https://twitter.com/moreati/status/1148548799813640193", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://twitter.com/zoom_us/status/1148710712241295361", "name" : "https://twitter.com/zoom_us/status/1148710712241295361", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the Zoom Client through 4.4.4 and RingCentral 7.0.136380.0312 on macOS, remote attackers can force a user to join a video call with the video camera active. This occurs because any web site can interact with the Zoom web server on localhost port 19421 or 19424. NOTE: a machine remains vulnerable if the Zoom Client was installed in the past and then uninstalled. Blocking exploitation requires additional steps, such as the ZDisableVideo preference and/or killing the web server, deleting the ~/.zoomus directory, and creating a ~/.zoomus plain file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ringcentral:ringcentral:7.0.136380.0312:*:*:*:*:mac_os_x:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:mac_os_x:*:*", "versionEndIncluding" : "4.4.4" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-09T06:15Z", "lastModifiedDate" : "2019-07-16T19:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13453", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109282", "name" : "109282", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-2-of-3/", "name" : "https://salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-2-of-3/", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://sourceforge.net/p/zipios/news/2019/07/version-017-cve-/", "name" : "https://sourceforge.net/p/zipios/news/2019/07/version-017-cve-/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32() and zipfile.cpp:Zipfile::Zipfile()." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zipios_project:zipios:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.1.7" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T15:15Z", "lastModifiedDate" : "2019-07-18T19:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13461", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "prestashop", "product" : { "product_data" : [ { "product_name" : "prestashop", "version" : { "version_data" : [ { "version_value" : "1.7.5.2", "version_affected" : "<=" }, { "version_value" : "1.7.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://assets.prestashop2.com/en/system/files/ps_releases/changelog_1.7.6.0-rc2.txt", "name" : "https://assets.prestashop2.com/en/system/files/ps_releases/changelog_1.7.6.0-rc2.txt", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] }, { "url" : "https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=40", "name" : "https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=40", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability due to a guessable value sent to the web application during checkout. An attacker could leak personal customer information. This is PrestaShop bug #14444." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.5.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prestashop:prestashop:1.7.6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:prestashop:prestashop:1.7.6.0:rc1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T18:15Z", "lastModifiedDate" : "2019-07-16T13:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13464", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "modsecurity", "product" : { "product_data" : [ { "product_name" : "owasp_modsecurity_core_rule_set", "version" : { "version_data" : [ { "version_value" : "3.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1386", "name" : "https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1386", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/1391", "name" : "https://github.com/SpiderLabs/owasp-modsecurity-crs/pull/1391", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script Uploads rules, because PHP automatically transforms dots into underscores in certain contexts where dots are invalid." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:modsecurity:owasp_modsecurity_core_rule_set:3.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T19:15Z", "lastModifiedDate" : "2019-07-15T19:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13470", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matrixssl", "product" : { "product_data" : [ { "product_name" : "matrixssl", "version" : { "version_data" : [ { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.8.5", "version_affected" : "=" }, { "version_value" : "3.8.6", "version_affected" : "=" }, { "version_value" : "3.8.7", "version_affected" : "=" }, { "version_value" : "3.8.7a", "version_affected" : "=" }, { "version_value" : "3.8.7b", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.9.3", "version_affected" : "=" }, { "version_value" : "3.9.5", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/matrixssl/matrixssl/blob/4-2-1-open/doc/CHANGES_v4.x.md#changes-between-420-and-421-june-2019", "name" : "https://github.com/matrixssl/matrixssl/blob/4-2-1-open/doc/CHANGES_v4.x.md#changes-between-420-and-421-june-2019", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matrixssl:matrixssl:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.2.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-16T13:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13475", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mobatek", "product" : { "product_data" : [ { "product_name" : "mobaxterm", "version" : { "version_data" : [ { "version_value" : "11.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-88" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vulnerability-lab.com/get_content.php?id=2186", "name" : "https://www.vulnerability-lab.com/get_content.php?id=2186", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In MobaXterm 11.1, the mobaxterm: URI handler has an argument injection vulnerability that allows remote attackers to execute arbitrary commands when the user visits a specially crafted URL. Based on the available command-line arguments of the software, one can simply inject -exec to execute arbitrary commands. The additional arguments -hideterm and -exitwhendone in the payload make the attack less visible." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mobatek:mobaxterm:11.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-09T22:15Z", "lastModifiedDate" : "2019-07-16T18:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13478", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yoast", "product" : { "product_data" : [ { "product_name" : "yoast_seo", "version" : { "version_data" : [ { "version_value" : "11.5", "version_affected" : "<=" }, { "version_value" : "11.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/Yoast/wordpress-seo/releases/tag/11.6-RC5", "name" : "https://github.com/Yoast/wordpress-seo/releases/tag/11.6-RC5", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*", "versionEndIncluding" : "11.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoast:yoast_seo:11.6:rc1:*:*:*:wordpress:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoast:yoast_seo:11.6:rc2:*:*:*:wordpress:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoast:yoast_seo:11.6:rc3:*:*:*:wordpress:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoast:yoast_seo:11.6:rc4:*:*:*:wordpress:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T23:15Z", "lastModifiedDate" : "2019-07-11T13:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13481", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-818lw_firmware", "version" : { "version_data" : [ { "version_value" : "2.06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109131", "name" : "109131", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-3.pdf", "name" : "https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-3.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-818lw_firmware:2.06:betab01:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-818lw:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-12T15:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13482", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-818lw_firmware", "version" : { "version_data" : [ { "version_value" : "2.06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109131", "name" : "109131", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-4.pdf", "name" : "https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-4.pdf", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-818lw_firmware:2.06:betab01:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-818lw:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-12T15:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13488", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trape_project", "product" : { "product_data" : [ { "product_name" : "trape", "version" : { "version_data" : [ { "version_value" : "2019-05-08", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/jofpin/trape/issues/169", "name" : "https://github.com/jofpin/trape/issues/169", "refsource" : "MISC", "tags" : [ "Exploit", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trape_project:trape:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2019-05-08" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-10T22:15Z", "lastModifiedDate" : "2019-07-14T22:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13489", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "trape_project", "product" : { "product_data" : [ { "product_name" : "trape", "version" : { "version_data" : [ { "version_value" : "2019-05-08", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/jofpin/trape/issues/168", "name" : "https://github.com/jofpin/trape/issues/168", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:trape_project:trape:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2019-05-08" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T22:15Z", "lastModifiedDate" : "2019-07-14T22:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13493", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sitecore", "product" : { "product_data" : [ { "product_name" : "experience_platform", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153613/Sitecore-9.0-Rev-171002-Cross-Site-Scripting.html", "name" : "http://packetstormsecurity.com/files/153613/Sitecore-9.0-Rev-171002-Cross-Site-Scripting.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded file extension parameter to inject arbitrary JavaScript." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sitecore:experience_platform:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-18T13:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html", "name" : "http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.mogozobo.com/?p=3534", "name" : "https://www.mogozobo.com/?p=3534", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T04:15Z", "lastModifiedDate" : "2019-07-12T12:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13503", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cesanta", "product" : { "product_data" : [ { "product_name" : "mongoose", "version" : { "version_data" : [ { "version_value" : "6.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/", "name" : "https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/cesanta/mongoose/pull/1035", "name" : "https://github.com/cesanta/mongoose/pull/1035", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cesanta:mongoose:6.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T02:15Z", "lastModifiedDate" : "2019-07-12T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13504", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "exiv2", "product" : { "product_data" : [ { "product_name" : "exiv2", "version" : { "version_data" : [ { "version_value" : "0.27.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109117", "name" : "109117", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/", "name" : "https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/Exiv2/exiv2/pull/943", "name" : "https://github.com/Exiv2/exiv2/pull/943", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] }, { "url" : "https://lists.debian.org/debian-lts-announce/2019/07/msg00015.html", "name" : "[debian-lts-announce] 20190719 [SECURITY] [DLA 1855-1] exiv2 security update", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.27.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T02:15Z", "lastModifiedDate" : "2019-07-12T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13505", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dwbooster", "product" : { "product_data" : [ { "product_name" : "appointment_hour_booking", "version" : { "version_data" : [ { "version_value" : "1.1.44", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/ivoschyk-cs/CVE-s/blob/master/Appointment%20Hour%20Booking%20%E2%80%93%20WordPress%20Booking%20Plugin%20--%20stored%20XSS", "name" : "https://github.com/ivoschyk-cs/CVE-s/blob/master/Appointment%20Hour%20Booking%20%E2%80%93%20WordPress%20Booking%20Plugin%20--%20stored%20XSS", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/appointment-hour-booking/#developers", "name" : "https://wordpress.org/plugins/appointment-hour-booking/#developers", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://wpvulndb.com/vulnerabilities/9458", "name" : "https://wpvulndb.com/vulnerabilities/9458", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dwbooster:appointment_hour_booking:1.1.44:*:*:*:*:wordpress:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T13:15Z", "lastModifiedDate" : "2019-07-16T09:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13506", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/nuxt/devalue/pull/8", "name" : "https://github.com/nuxt/devalue/pull/8", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/nuxt/devalue/releases/tag/v1.2.3", "name" : "https://github.com/nuxt/devalue/releases/tag/v1.2.3", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://github.com/nuxt/nuxt.js/commit/0d5dfe71917191c5b07f373896311f2d8f6b75be", "name" : "https://github.com/nuxt/nuxt.js/commit/0d5dfe71917191c5b07f373896311f2d8f6b75be", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/nuxt/nuxt.js/compare/c0776eb...8d14cd4", "name" : "https://github.com/nuxt/nuxt.js/compare/c0776eb...8d14cd4", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://github.com/nuxt/nuxt.js/releases/tag/v2.6.2", "name" : "https://github.com/nuxt/nuxt.js/releases/tag/v2.6.2", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://www.npmjs.com/advisories/814", "name" : "https://www.npmjs.com/advisories/814", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nuxtjs:\\@nuxt\\/devalue:*:*:*:*:*:node.js:*:*", "versionEndExcluding" : "1.2.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nuxtjs:nuxt.js:*:*:*:*:*:node.js:*:*", "versionEndExcluding" : "2.6.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-18T12:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13507", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hidea", "product" : { "product_data" : [ { "product_name" : "az_admin", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.exploit-db.com/exploits/47034", "name" : "https://www.exploit-db.com/exploits/47034", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "hidea.com AZ Admin 1.0 has news_det.php?cod= SQL Injection." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hidea:az_admin:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T14:15Z", "lastModifiedDate" : "2019-07-14T22:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13509", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.docker.com/engine/release-notes/", "name" : "https://docs.docker.com/engine/release-notes/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10), Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13560", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-655_firmware", "version" : { "version_data" : [ { "version_value" : "3.02b05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "name" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/setupwizard.txt", "name" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/setupwizard.txt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "name" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-655:c1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T15:15Z", "lastModifiedDate" : "2019-07-12T15:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13561", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-655_firmware", "version" : { "version_data" : [ { "version_value" : "3.02b05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "name" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/commandinjection.txt", "name" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/commandinjection.txt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "name" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-655:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T15:15Z", "lastModifiedDate" : "2019-07-12T15:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13562", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-655_firmware", "version" : { "version_data" : [ { "version_value" : "3.02b05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "name" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/crosssitescripting.txt", "name" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/crosssitescripting.txt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "name" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, and the /www/apply_sec.cgi html_response_return_page parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-655:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T15:15Z", "lastModifiedDate" : "2019-07-12T15:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13563", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dlink", "product" : { "product_data" : [ { "product_name" : "dir-655_firmware", "version" : { "version_data" : [ { "version_value" : "3.02b05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "name" : "ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/csrf.txt", "name" : "https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/csrf.txt", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "name" : "https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:dlink:dir-655:c1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T15:15Z", "lastModifiedDate" : "2019-07-12T15:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13564", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pingidentity", "product" : { "product_data" : [ { "product_name" : "agentless_integration_kit", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.pingidentity.com/s/document-item?bundleId=integrations&topicId=Integration_Kits%2FAgentless%2FagentlessIK_c_changelog.html", "name" : "https://support.pingidentity.com/s/document-item?bundleId=integrations&topicId=Integration_Kits%2FAgentless%2FagentlessIK_c_changelog.html", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "XSS exists in Ping Identity Agentless Integration Kit before 1.5." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pingidentity:agentless_integration_kit:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.5" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T18:15Z", "lastModifiedDate" : "2019-07-12T17:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13567", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS", "name" : "https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://twitter.com/JLLeitschuh/status/1149420685405708295", "name" : "https://twitter.com/JLLeitschuh/status/1149420685405708295", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://twitter.com/JLLeitschuh/status/1149422543658520578", "name" : "https://twitter.com/JLLeitschuh/status/1149422543658520578", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://twitter.com/riskybusiness/status/1149125147019767814", "name" : "https://twitter.com/riskybusiness/status/1149125147019767814", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://twitter.com/wcbowling/status/1149457231504498689", "name" : "https://twitter.com/wcbowling/status/1149457231504498689", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Zoom Client before 4.4.53932.0709 on macOS allows remote code execution, a different vulnerability than CVE-2019-13450. If the ZoomOpener daemon (aka the hidden web server) is running, but the Zoom Client is not installed or can't be opened, an attacker can remotely execute code with a maliciously crafted launch URL. NOTE: ZoomOpener is removed by the Apple Malware Removal Tool (MRT) if this tool is enabled and has the 2019-07-10 MRTConfigData." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T04:15Z", "lastModifiedDate" : "2019-07-12T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13569", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://wordpress.org/plugins/email-subscribers/#developers", "name" : "https://wordpress.org/plugins/email-subscribers/#developers", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T23:15Z", "lastModifiedDate" : "2019-07-19T23:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13573", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "foliovision", "product" : { "product_data" : [ { "product_name" : "fv_flowplayer_video_player", "version" : { "version_data" : [ { "version_value" : "0.9.12", "version_affected" : "=" }, { "version_value" : "0.9.13", "version_affected" : "=" }, { "version_value" : "0.9.14", "version_affected" : "=" }, { "version_value" : "0.9.15", "version_affected" : "=" }, { "version_value" : "0.9.16", "version_affected" : "=" }, { "version_value" : "0.9.18", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.12", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" }, { "version_value" : "1.2.14", "version_affected" : "=" }, { "version_value" : "1.2.16", "version_affected" : "=" }, { "version_value" : "1.2.17", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.2.1", "version_affected" : "=" }, { "version_value" : "6.0.2.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.3.1", "version_affected" : "=" }, { "version_value" : "6.0.3.2", "version_affected" : "=" }, { "version_value" : "6.0.3.3", "version_affected" : "=" }, { "version_value" : "6.0.3.4", "version_affected" : "=" }, { "version_value" : "6.0.3.5", "version_affected" : "=" }, { "version_value" : "6.0.3.6", "version_affected" : "=" }, { "version_value" : "6.0.3.7", "version_affected" : "=" }, { "version_value" : "6.0.3.8", "version_affected" : "=" }, { "version_value" : "6.0.3.9", "version_affected" : "=" }, { "version_value" : "6.0.3.10", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.4.1", "version_affected" : "=" }, { "version_value" : "6.0.4.2", "version_affected" : "=" }, { "version_value" : "6.0.4.3", "version_affected" : "=" }, { "version_value" : "6.0.4.4", "version_affected" : "=" }, { "version_value" : "6.0.4.5", "version_affected" : "=" }, { "version_value" : "6.0.4.6", "version_affected" : "=" }, { "version_value" : "6.0.4.7", "version_affected" : "=" }, { "version_value" : "6.0.4.8", "version_affected" : "=" }, { "version_value" : "6.0.4.9", "version_affected" : "=" }, { "version_value" : "6.0.4.10", "version_affected" : "=" }, { "version_value" : "6.0.4.11", "version_affected" : "=" }, { "version_value" : "6.0.4.12", "version_affected" : "=" }, { "version_value" : "6.0.4.13", "version_affected" : "=" }, { "version_value" : "6.0.4.14", "version_affected" : "=" }, { "version_value" : "6.0.4.15", "version_affected" : "=" }, { "version_value" : "6.0.4.16", "version_affected" : "=" }, { "version_value" : "6.0.4.17", "version_affected" : "=" }, { "version_value" : "6.0.4.18", "version_affected" : "=" }, { "version_value" : "6.0.4.19", "version_affected" : "=" }, { "version_value" : "6.0.4.20", "version_affected" : "=" }, { "version_value" : "6.0.4.21", "version_affected" : "=" }, { "version_value" : "6.0.4.22", "version_affected" : "=" }, { "version_value" : "6.0.4.24", "version_affected" : "=" }, { "version_value" : "6.0.4.25", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.5.1", "version_affected" : "=" }, { "version_value" : "6.0.5.2", "version_affected" : "=" }, { "version_value" : "6.0.5.3", "version_affected" : "=" }, { "version_value" : "6.0.5.4", "version_affected" : "=" }, { "version_value" : "6.0.5.5", "version_affected" : "=" }, { "version_value" : "6.0.5.6", "version_affected" : "=" }, { "version_value" : "6.0.5.7", "version_affected" : "=" }, { "version_value" : "6.0.5.8", "version_affected" : "=" }, { "version_value" : "6.0.5.9", "version_affected" : "=" }, { "version_value" : "6.0.5.10", "version_affected" : "=" }, { "version_value" : "6.0.5.11", "version_affected" : "=" }, { "version_value" : "6.0.5.12", "version_affected" : "=" }, { "version_value" : "6.0.5.13", "version_affected" : "=" }, { "version_value" : "6.0.5.14", "version_affected" : "=" }, { "version_value" : "6.0.5.15", "version_affected" : "=" }, { "version_value" : "6.0.5.16", "version_affected" : "=" }, { "version_value" : "6.0.5.17", "version_affected" : "=" }, { "version_value" : "6.0.5.18", "version_affected" : "=" }, { "version_value" : "6.0.5.19", "version_affected" : "=" }, { "version_value" : "6.0.5.20", "version_affected" : "=" }, { "version_value" : "6.0.5.21", "version_affected" : "=" }, { "version_value" : "6.0.5.22", "version_affected" : "=" }, { "version_value" : "6.0.5.23", "version_affected" : "=" }, { "version_value" : "6.0.5.24", "version_affected" : "=" }, { "version_value" : "6.0.5.25", "version_affected" : "=" }, { "version_value" : "6.0.5.26", "version_affected" : "=" }, { "version_value" : "6.0.5.27", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.1.4", "version_affected" : "=" }, { "version_value" : "6.1.5", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.2.5", "version_affected" : "=" }, { "version_value" : "6.2.6", "version_affected" : "=" }, { "version_value" : "6.2.7", "version_affected" : "=" }, { "version_value" : "6.2.8", "version_affected" : "=" }, { "version_value" : "6.2.9", "version_affected" : "=" }, { "version_value" : "6.2.10", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "6.3.1", "version_affected" : "=" }, { "version_value" : "6.3.2", "version_affected" : "=" }, { "version_value" : "6.3.3", "version_affected" : "=" }, { "version_value" : "6.3.4", "version_affected" : "=" }, { "version_value" : "6.3.5", "version_affected" : "=" }, { "version_value" : "6.3.6", "version_affected" : "=" }, { "version_value" : "6.3.7", "version_affected" : "=" }, { "version_value" : "6.3.8", "version_affected" : "=" }, { "version_value" : "6.3.9", "version_affected" : "=" }, { "version_value" : "6.3.10", "version_affected" : "=" }, { "version_value" : "6.3.11", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.4.1", "version_affected" : "=" }, { "version_value" : "6.4.2", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "6.5.2", "version_affected" : "=" }, { "version_value" : "6.6", "version_affected" : "=" }, { "version_value" : "6.6.1", "version_affected" : "=" }, { "version_value" : "6.6.2", "version_affected" : "=" }, { "version_value" : "6.6.3", "version_affected" : "=" }, { "version_value" : "6.6.4", "version_affected" : "=" }, { "version_value" : "6.6.5", "version_affected" : "=" }, { "version_value" : "6.6.6", "version_affected" : "=" }, { "version_value" : "7.0.726", "version_affected" : "=" }, { "version_value" : "7.1.1.726", "version_affected" : "=" }, { "version_value" : "7.1.2.726", "version_affected" : "=" }, { "version_value" : "7.1.3.726", "version_affected" : "=" }, { "version_value" : "7.1.4.726", "version_affected" : "=" }, { "version_value" : "7.1.5.726", "version_affected" : "=" }, { "version_value" : "7.1.6.726", "version_affected" : "=" }, { "version_value" : "7.1.7.726", "version_affected" : "=" }, { "version_value" : "7.1.10.726", "version_affected" : "=" }, { "version_value" : "7.1.11.726", "version_affected" : "=" }, { "version_value" : "7.1.12.726", "version_affected" : "=" }, { "version_value" : "7.1.13.727", "version_affected" : "=" }, { "version_value" : "7.1.14.727", "version_affected" : "=" }, { "version_value" : "7.1.15.727", "version_affected" : "=" }, { "version_value" : "7.2.0.727", "version_affected" : "=" }, { "version_value" : "7.2.1.727", "version_affected" : "=" }, { "version_value" : "7.2.2.727", "version_affected" : "=" }, { "version_value" : "7.2.3.727", "version_affected" : "=" }, { "version_value" : "7.2.4.727", "version_affected" : "=" }, { "version_value" : "7.2.5.727", "version_affected" : "=" }, { "version_value" : "7.2.6.727", "version_affected" : "=" }, { "version_value" : "7.2.7.727", "version_affected" : "=" }, { "version_value" : "7.2.8.727", "version_affected" : "=" }, { "version_value" : "7.3.0.727", "version_affected" : "=" }, { "version_value" : "7.3.1.727", "version_affected" : "=" }, { "version_value" : "7.3.3.727", "version_affected" : "=" }, { "version_value" : "7.3.4.727", "version_affected" : "=" }, { "version_value" : "7.3.6.727", "version_affected" : "=" }, { "version_value" : "7.3.7.727", "version_affected" : "=" }, { "version_value" : "7.3.9.727", "version_affected" : "=" }, { "version_value" : "7.3.12.727", "version_affected" : "=" }, { "version_value" : "7.3.13.727", "version_affected" : "=" }, { "version_value" : "7.3.14.727", "version_affected" : "=" }, { "version_value" : "7.3.15.727", "version_affected" : "=" }, { "version_value" : "7.3.16.727", "version_affected" : "=" }, { "version_value" : "7.3.18.727", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fortiguard.com/zeroday/FG-VD-19-097", "name" : "https://fortiguard.com/zeroday/FG-VD-19-097", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://plugins.trac.wordpress.org/changeset/2121566/fv-wordpress-flowplayer/trunk/models/db.php", "name" : "https://plugins.trac.wordpress.org/changeset/2121566/fv-wordpress-flowplayer/trunk/models/db.php", "refsource" : "CONFIRM", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers", "name" : "https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers", "refsource" : "CONFIRM", "tags" : [ "Product", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:foliovision:fv_flowplayer_video_player:*:*:*:*:*:wordpress:*:*", "versionEndExcluding" : "7.3.19.727" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T16:15Z", "lastModifiedDate" : "2019-07-19T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13574", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://benjamin-bouchet.com/blog/vulnerabilite-dans-la-gem-mini_magick-version-4-9-4/", "name" : "https://benjamin-bouchet.com/blog/vulnerabilite-dans-la-gem-mini_magick-version-4-9-4/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851", "name" : "https://github.com/minimagick/minimagick/commit/4cd5081e58810d3394d27a67219e8e4e0445d851", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/minimagick/minimagick/compare/d484786...293f9bb", "name" : "https://github.com/minimagick/minimagick/compare/d484786...293f9bb", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/minimagick/minimagick/releases/tag/v4.9.4", "name" : "https://github.com/minimagick/minimagick/releases/tag/v4.9.4", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/20", "name" : "20190715 [SECURITY] [DSA 4481-1] ruby-mini-magick security update", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://www.debian.org/security/2019/dsa-4481", "name" : "DSA-4481", "refsource" : "DEBIAN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In lib/mini_magick/image.rb in MiniMagick before 4.9.4, a fetched remote image filename could cause remote command execution because Image.open input is directly passed to Kernel#open, which accepts a '|' character followed by a command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-12T03:15Z", "lastModifiedDate" : "2019-07-12T12:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13575", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wpeverest", "product" : { "product_data" : [ { "product_name" : "everest_forms", "version" : { "version_data" : [ { "version_value" : "1.4.9", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fortiguard.com/zeroday/FG-VD-19-096", "name" : "https://fortiguard.com/zeroday/FG-VD-19-096", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9", "name" : "https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9#diff-bb2b21ef7774df8687ff02b0284505c6", "name" : "https://github.com/wpeverest/everest-forms/commit/755d095fe0d9a756a13800d1513cf98219e4a3f9#diff-bb2b21ef7774df8687ff02b0284505c6", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/everest-forms/#developers", "name" : "https://wordpress.org/plugins/everest-forms/#developers", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] }, { "url" : "https://wpvulndb.com/vulnerabilities/9466", "name" : "https://wpvulndb.com/vulnerabilities/9466", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A SQL injection vulnerability exists in WPEverest Everest Forms plugin for WordPress through 1.4.9. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via includes/evf-entry-functions.php" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wpeverest:everest_forms:*:*:*:*:*:wordpress:*:*", "versionEndIncluding" : "1.4.9" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T15:15Z", "lastModifiedDate" : "2019-07-19T23:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13577", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hyp3rlinx.altervista.org", "name" : "http://hyp3rlinx.altervista.org", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/153675/MAPLE-Computer-WBT-SNMP-Administrator-2.0.195.15-Buffer-Overflow.html", "name" : "http://packetstormsecurity.com/files/153675/MAPLE-Computer-WBT-SNMP-Administrator-2.0.195.15-Buffer-Overflow.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jul/17", "name" : "20190716 CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/29", "name" : "20190718 CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SnmpAdm.exe in MAPLE WBT SNMP Administrator v2.0.195.15 has an Unauthenticated Remote Buffer Overflow via a long string to the CE Remote feature listening on Port 987." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13584", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fanucamerica", "product" : { "product_data" : [ { "product_name" : "robotics_virtual_robot_controller", "version" : { "version_data" : [ { "version_value" : "8.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153672/FANUC-Robotics-Virtual-Robot-Controller-8.23-Path-Traversal.html", "name" : "http://packetstormsecurity.com/files/153672/FANUC-Robotics-Virtual-Robot-Controller-8.23-Path-Traversal.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/23", "name" : "20190715 [SYSS-2019-025] FANUC Robotics Virtual Robot Controller - Path Traversal (CWE-22)", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 allows Directory Traversal via a forged HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fanucamerica:robotics_virtual_robot_controller:8.23:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T19:15Z", "lastModifiedDate" : "2019-07-18T17:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13585", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fanucamerica", "product" : { "product_data" : [ { "product_name" : "robotics_virtual_robot_controller", "version" : { "version_data" : [ { "version_value" : "8.23", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153671/FANUC-Robotics-Virtual-Robot-Controller-8.23-Buffer-Overflow.html", "name" : "http://packetstormsecurity.com/files/153671/FANUC-Robotics-Virtual-Robot-Controller-8.23-Buffer-Overflow.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jul/24", "name" : "20190715 [SYSS-2019-024] FANUC Robotics Virtual Robot Controller - Stack-based Buffer Overflow (CWE-121)", "refsource" : "BUGTRAQ", "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 has a Buffer Overflow via a forged HTTP request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fanucamerica:robotics_virtual_robot_controller:8.23:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T19:15Z", "lastModifiedDate" : "2019-07-18T17:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13589", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109281", "name" : "109281", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://github.com/rubygems/rubygems.org/issues/2051", "name" : "https://github.com/rubygems/rubygems.org/issues/2051", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://rubygems.org/gems/paranoid2/versions", "name" : "https://rubygems.org/gems/paranoid2/versions", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.5." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-14T16:15Z", "lastModifiedDate" : "2019-07-14T21:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13590", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://sourceforge.net/p/sox/bugs/325/", "name" : "https://sourceforge.net/p/sox/bugs/325/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in libsox.a in SoX 14.4.2. In sox-fmt.h (startread function), there is an integer overflow on the result of integer addition (wraparound to 0) fed into the lsx_calloc macro that wraps malloc. When a NULL pointer is returned, it is used without a prior check that it is a valid pointer, leading to a NULL pointer dereference on lsx_readbuf in formats_i.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-14T16:15Z", "lastModifiedDate" : "2019-07-14T21:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13594", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mirumee", "product" : { "product_data" : [ { "product_name" : "saleor", "version" : { "version_data" : [ { "version_value" : "2.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mirumee/saleor/releases/tag/2.8.0", "name" : "https://github.com/mirumee/saleor/releases/tag/2.8.0", "refsource" : "MISC", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mirumee:saleor:2.7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-14T17:15Z", "lastModifiedDate" : "2019-07-17T18:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13597", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html", "name" : "https://pentest.com.tr/exploits/Sahi-Pro-v8-x-Unauthenticated-RCE-Exploit-Python.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/47110", "name" : "https://www.exploit-db.com/exploits/47110", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "_s_/sprm/_s_/dyn/Player_setScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run \".sah\" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the _execute() function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-14T18:15Z", "lastModifiedDate" : "2019-07-14T21:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13598", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "getvera", "product" : { "product_data" : [ { "product_name" : "vera_edge_firmware", "version" : { "version_data" : [ { "version_value" : "1.7.4452", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/", "name" : "https://distributedcompute.com/2019/07/13/vera-edge-home-controller-rce-via-unauthenticated-command-injection/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LuaUPnP in Vera Edge Home Controller 1.7.4452 allows remote unauthenticated users to execute arbitrary OS commands via the code parameter to /port_3480/data_request because the \"No unsafe lua allowed\" code block is skipped." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:getvera:vera_edge_firmware:1.7.4452:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:getvera:vera_edge:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-14T18:15Z", "lastModifiedDate" : "2019-07-15T15:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13602", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "videolan", "product" : { "product_data" : [ { "product_name" : "vlc_media_player", "version" : { "version_data" : [ { "version_value" : "3.0.7.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-191" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109158", "name" : "109158", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://git.videolan.org/?p=vlc.git;a=commit;h=8e8e0d72447f8378244f5b4a3dcde036dbeb1491", "name" : "https://git.videolan.org/?p=vlc.git;a=commit;h=8e8e0d72447f8378244f5b4a3dcde036dbeb1491", "refsource" : "MISC", "tags" : [ "Mailing List", "Vendor Advisory" ] }, { "url" : "https://git.videolan.org/?p=vlc.git;a=commit;h=b2b157076d9e94df34502dd8df0787deb940e938", "name" : "https://git.videolan.org/?p=vlc.git;a=commit;h=b2b157076d9e94df34502dd8df0787deb940e938", "refsource" : "MISC", "tags" : [ "Mailing List", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.7.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-14T21:15Z", "lastModifiedDate" : "2019-07-15T13:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13603", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/sungjungk/fp-scanner-hacking", "name" : "https://github.com/sungjungk/fp-scanner-hacking", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.youtube.com/watch?v=Grirez2xeas", "name" : "https://www.youtube.com/watch?v=Grirez2xeas", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.youtube.com/watch?v=wEXJDyEOatM", "name" : "https://www.youtube.com/watch?v=wEXJDyEOatM", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in the HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader Windows Biometric Framework driver 5.0.0.5. It has a statically coded initialization vector to encrypt a user's fingerprint image, resulting in weak encryption of that. This, in combination with retrieving an encrypted fingerprint image and encryption key (through another vulnerability), allows an attacker to obtain a user's fingerprint image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-16T17:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13604", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/sungjungk/fp-img-key-crack", "name" : "https://github.com/sungjungk/fp-img-key-crack", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.youtube.com/watch?v=7tKJQdKRm2k", "name" : "https://www.youtube.com/watch?v=7tKJQdKRm2k", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.youtube.com/watch?v=BwYK_xZlKi4", "name" : "https://www.youtube.com/watch?v=BwYK_xZlKi4", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24. The key for obfuscating the fingerprint image is vulnerable to brute-force attacks. This allows an attacker to recover the key and decrypt that image using the key. Successful exploitation causes a sensitive biometric information leak." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-15T14:15Z", "lastModifiedDate" : "2019-07-15T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13605", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "centos-webpanel", "product" : { "product_data" : [ { "product_name" : "centos_web_panel", "version" : { "version_data" : [ { "version_value" : "0.9.8.836", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html", "name" : "http://packetstormsecurity.com/files/153665/CentOS-Control-Web-Panel-0.9.8.836-Authentication-Bypass.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13605.md", "name" : "https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-13605.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://www.exploit-db.com/exploits/47123", "name" : "https://www.exploit-db.com/exploits/47123", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.838 to 0.9.8.846, remote attackers can bypass authentication in the login process by leveraging the knowledge of a valid username. The attacker must defeat an encoding that is not equivalent to base64, and thus this is different from CVE-2019-13360." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:centos-webpanel:centos_web_panel:0.9.8.836:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-18T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13607", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://blog.rakeshmane.com/2019/07/u-xss-in-operamini-for-ios-browser-0-day.html", "name" : "https://blog.rakeshmane.com/2019/07/u-xss-in-operamini-for-ios-browser-0-day.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Opera Mini application through 16.0.14 for iOS has a UXSS vulnerability that can be triggered by performing navigation to a javascript: URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T15:15Z", "lastModifiedDate" : "2019-07-18T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13611", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/miguelgrinberg/python-engineio/issues/128", "name" : "https://github.com/miguelgrinberg/python-engineio/issues/128", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking (CSWSH) vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T00:15Z", "lastModifiedDate" : "2019-07-16T12:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13612", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.altn.com/WebX/.59862f3c", "name" : "http://lists.altn.com/WebX/.59862f3c", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MDaemon Email Server 19 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently popular message sizes. This might interfere with risk management for malicious e-mail, if a customer deploys a server with sufficient resources to scan large messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T13:15Z", "lastModifiedDate" : "2019-07-16T14:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13613", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13613/", "name" : "https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13613/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CMD_FTEST_CONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 (EU) and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T17:15Z", "lastModifiedDate" : "2019-07-17T18:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13614", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/", "name" : "https://fakhrizulkifli.github.io/posts/2019/07/15/CVE-2019-13614/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T18:15Z", "lastModifiedDate" : "2019-07-17T18:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13615", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "videolan", "product" : { "product_data" : [ { "product_name" : "vlc_media_player", "version" : { "version_data" : [ { "version_value" : "3.0.7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://trac.videolan.org/vlc/ticket/22474", "name" : "https://trac.videolan.org/vlc/ticket/22474", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VideoLAN VLC media player 3.0.7.1 has a heap-based buffer over-read in mkv::demux_sys_t::FreeUnused() in modules/demux/mkv/demux.cpp when called from mkv::Open in modules/demux/mkv/mkv.cpp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:videolan:vlc_media_player:3.0.7.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-18T16:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13616", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libsdl", "product" : { "product_data" : [ { "product_name" : "libsdl", "version" : { "version_data" : [ { "version_value" : "1.2.15", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.libsdl.org/show_bug.cgi?id=4538", "name" : "https://bugzilla.libsdl.org/show_bug.cgi?id=4538", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libsdl:libsdl:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.2.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libsdl:libsdl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0.0", "versionEndIncluding" : "2.0.9" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-17T18:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13617", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nginx", "product" : { "product_data" : [ { "product_name" : "njs", "version" : { "version_data" : [ { "version_value" : "0.3.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15093", "name" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15093", "refsource" : "MISC", "tags" : [ "Permissions Required", "Third Party Advisory" ] }, { "url" : "https://github.com/nginx/njs/issues/174", "name" : "https://github.com/nginx/njs/issues/174", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "njs through 0.3.3, used in NGINX, has a heap-based buffer over-read in nxt_vsprintf in nxt/nxt_sprintf.c during error handling, as demonstrated by an njs_regexp_literal call that leads to an njs_parser_lexer_error call and then an njs_parser_scope_error call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nginx:njs:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-19T02:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13618", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gpac", "product" : { "product_data" : [ { "product_name" : "gpac", "version" : { "version_data" : [ { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-125" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/gpac/gpac/compare/440d475...6b4ab40", "name" : "https://github.com/gpac/gpac/compare/440d475...6b4ab40", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/gpac/gpac/issues/1250", "name" : "https://github.com/gpac/gpac/issues/1250", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.8.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T17:15Z", "lastModifiedDate" : "2019-07-17T18:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13619", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wireshark", "product" : { "product_data" : [ { "product_name" : "wireshark", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109293", "name" : "109293", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870", "name" : "https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15870", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9", "name" : "https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=7e90aed666e809c0db5de9d1816802a7dcea28d9", "refsource" : "MISC", "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ] }, { "url" : "https://www.wireshark.org/security/wnpa-sec-2019-20.html", "name" : "https://www.wireshark.org/security/wnpa-sec-2019-20.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Wireshark 3.0.0 to 3.0.2, 2.6.0 to 2.6.9, and 2.4.0 to 2.4.15, the ASN.1 BER dissector and related dissectors could crash. This was addressed in epan/asn1.c by properly restricting buffer increments." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.4.0", "versionEndIncluding" : "2.4.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.6.0", "versionEndIncluding" : "2.6.9" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0.0", "versionEndIncluding" : "3.0.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T20:15Z", "lastModifiedDate" : "2019-07-19T15:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13623", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nsa", "product" : { "product_data" : [ { "product_name" : "ghidra", "version" : { "version_data" : [ { "version_value" : "9.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.fxiao.me/ghidra/", "name" : "http://blog.fxiao.me/ghidra/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/NationalSecurityAgency/ghidra/issues/789", "name" : "https://github.com/NationalSecurityAgency/ghidra/issues/789", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In NSA Ghidra through 9.0.4, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename. This allows attackers to overwrite arbitrary files in scenarios where an intermediate analysis result is archived for sharing with other persons. To achieve arbitrary code execution, one approach is to overwrite some critical Ghidra modules, e.g., the decompile module." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*", "versionEndIncluding" : "9.0.4" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T03:15Z", "lastModifiedDate" : "2019-07-19T17:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13624", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "onosproject", "product" : { "product_data" : [ { "product_name" : "onos", "version" : { "version_data" : [ { "version_value" : "1.15.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gerrit.onosproject.org/#/c/20767/", "name" : "https://gerrit.onosproject.org/#/c/20767/", "refsource" : "MISC", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In ONOS 1.15.0, apps/yang/web/src/main/java/org/onosproject/yang/web/YangWebResource.java mishandles backquote characters within strings that can be used in a shell command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:onosproject:onos:1.15.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T03:15Z", "lastModifiedDate" : "2019-07-19T18:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13625", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-611" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.fxiao.me/ghidra/", "name" : "http://blog.fxiao.me/ghidra/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/NationalSecurityAgency/ghidra/issues/71", "name" : "https://github.com/NationalSecurityAgency/ghidra/issues/71", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/", "name" : "https://xlab.tencent.com/en/2019/03/18/ghidra-from-xxe-to-rce/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*", "versionEndExcluding" : "9.0.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.1, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.2 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.4 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 9.2, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T03:15Z", "lastModifiedDate" : "2019-07-19T17:33Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13626", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-190" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.libsdl.org/show_bug.cgi?id=4522", "name" : "https://bugzilla.libsdl.org/show_bug.cgi?id=4522", "refsource" : "MISC", "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libsdl:libsdl:*:*:*:*:*:*:*:*", "versionStartIncluding" : "2.0.0", "versionEndIncluding" : "2.0.9" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T16:15Z", "lastModifiedDate" : "2019-07-18T17:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13631", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109291", "name" : "109291", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://patchwork.kernel.org/patch/11040813/", "name" : "https://patchwork.kernel.org/patch/11040813/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T19:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13636", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://git.savannah.gnu.org/cgit/patch.git/commit/?id=dce4683cbbe107a95f1f0d45fabc304acfb5d71a", "name" : "https://git.savannah.gnu.org/cgit/patch.git/commit/?id=dce4683cbbe107a95f1f0d45fabc304acfb5d71a", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13637", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/active-labs/Advisories/blob/master/ACTIVE-2019-009.md", "name" : "https://github.com/active-labs/Advisories/blob/master/ACTIVE-2019-009.md", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows. An attacker could exploit this vulnerability by convincing a targeted user to follow a malicious link. Successful exploitation could cause the application to load libraries from the directory targeted by the URI link. The attacker could use this behavior to execute arbitrary commands on the system with the privileges of the targeted user if the attacker can place a crafted library in a directory that is accessible to the vulnerable system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13640", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/qbittorrent/qBittorrent/issues/10925", "name" : "https://github.com/qbittorrent/qBittorrent/issues/10925", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app/application.cpp allows command injection via shell metacharacters in the torrent name parameter or current tracker parameter, as demonstrated by remote command execution via a crafted name within an RSS feed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T22:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13643", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/espocrm/espocrm/issues/1349", "name" : "https://github.com/espocrm/espocrm/issues/1349", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/espocrm/espocrm/milestone/64?closed=1", "name" : "https://github.com/espocrm/espocrm/milestone/64?closed=1", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stored XSS in EspoCRM before 5.6.4 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. The attack begins by storing a new stream message containing an XSS payload. The stored payload can then be triggered by clicking a malicious link on the Notifications page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T03:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13644", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "firefly-iii", "product" : { "product_data" : [ { "product_name" : "firefly_iii", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.0.5", "version_affected" : "=" }, { "version_value" : "3.4.0.6", "version_affected" : "=" }, { "version_value" : "3.4.0.7", "version_affected" : "=" }, { "version_value" : "3.4.0.8", "version_affected" : "=" }, { "version_value" : "3.4.0.9", "version_affected" : "=" }, { "version_value" : "3.4.0.10", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.6.1", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.6.1", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.2.1", "version_affected" : "=" }, { "version_value" : "3.7.2.2", "version_affected" : "=" }, { "version_value" : "3.7.2.3", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.8.1", "version_affected" : "=" }, { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.3", "version_affected" : "=" }, { "version_value" : "3.10.4", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.3.7", "version_affected" : "=" }, { "version_value" : "4.3.8", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.3.1", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.6.8", "version_affected" : "=" }, { "version_value" : "4.6.9", "version_affected" : "=" }, { "version_value" : "4.6.10", "version_affected" : "=" }, { "version_value" : "4.6.11", "version_affected" : "=" }, { "version_value" : "4.6.11.1", "version_affected" : "=" }, { "version_value" : "4.6.12", "version_affected" : "=" }, { "version_value" : "4.6.13", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.1.1", "version_affected" : "=" }, { "version_value" : "4.7.1.2", "version_affected" : "=" }, { "version_value" : "4.7.1.3", "version_affected" : "=" }, { "version_value" : "4.7.1.4", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.2.1", "version_affected" : "=" }, { "version_value" : "4.7.2.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.3.1", "version_affected" : "=" }, { "version_value" : "4.7.3.2", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.5.1", "version_affected" : "=" }, { "version_value" : "4.7.5.2", "version_affected" : "=" }, { "version_value" : "4.7.5.3", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.6.1", "version_affected" : "=" }, { "version_value" : "4.7.6.2", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.7.11", "version_affected" : "=" }, { "version_value" : "4.7.12", "version_affected" : "=" }, { "version_value" : "4.7.12.1", "version_affected" : "=" }, { "version_value" : "4.7.13", "version_affected" : "=" }, { "version_value" : "4.7.14", "version_affected" : "=" }, { "version_value" : "4.7.15", "version_affected" : "=" }, { "version_value" : "4.7.16", "version_affected" : "=" }, { "version_value" : "4.7.17", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/firefly-iii/firefly-iii/compare/76aa8ac...45b8c36", "name" : "https://github.com/firefly-iii/firefly-iii/compare/76aa8ac...45b8c36", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/firefly-iii/firefly-iii/issues/2335", "name" : "https://github.com/firefly-iii/firefly-iii/issues/2335", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefly III before 4.7.17.1 is vulnerable to stored XSS due to lack of filtration of user-supplied data in a budget name. The JavaScript code is contained in a transaction, and is executed on the tags/show/$tag_number$ tag summary page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.7.17.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T03:15Z", "lastModifiedDate" : "2019-07-18T15:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13645", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "firefly-iii", "product" : { "product_data" : [ { "product_name" : "firefly_iii", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.0.5", "version_affected" : "=" }, { "version_value" : "3.4.0.6", "version_affected" : "=" }, { "version_value" : "3.4.0.7", "version_affected" : "=" }, { "version_value" : "3.4.0.8", "version_affected" : "=" }, { "version_value" : "3.4.0.9", "version_affected" : "=" }, { "version_value" : "3.4.0.10", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.6.1", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.6.1", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.2.1", "version_affected" : "=" }, { "version_value" : "3.7.2.2", "version_affected" : "=" }, { "version_value" : "3.7.2.3", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.8.1", "version_affected" : "=" }, { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.3", "version_affected" : "=" }, { "version_value" : "3.10.4", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.3.7", "version_affected" : "=" }, { "version_value" : "4.3.8", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.3.1", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.6.8", "version_affected" : "=" }, { "version_value" : "4.6.9", "version_affected" : "=" }, { "version_value" : "4.6.10", "version_affected" : "=" }, { "version_value" : "4.6.11", "version_affected" : "=" }, { "version_value" : "4.6.11.1", "version_affected" : "=" }, { "version_value" : "4.6.12", "version_affected" : "=" }, { "version_value" : "4.6.13", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.1.1", "version_affected" : "=" }, { "version_value" : "4.7.1.2", "version_affected" : "=" }, { "version_value" : "4.7.1.3", "version_affected" : "=" }, { "version_value" : "4.7.1.4", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.2.1", "version_affected" : "=" }, { "version_value" : "4.7.2.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.3.1", "version_affected" : "=" }, { "version_value" : "4.7.3.2", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.5.1", "version_affected" : "=" }, { "version_value" : "4.7.5.2", "version_affected" : "=" }, { "version_value" : "4.7.5.3", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.6.1", "version_affected" : "=" }, { "version_value" : "4.7.6.2", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.7.11", "version_affected" : "=" }, { "version_value" : "4.7.12", "version_affected" : "=" }, { "version_value" : "4.7.12.1", "version_affected" : "=" }, { "version_value" : "4.7.13", "version_affected" : "=" }, { "version_value" : "4.7.14", "version_affected" : "=" }, { "version_value" : "4.7.15", "version_affected" : "=" }, { "version_value" : "4.7.16", "version_affected" : "=" }, { "version_value" : "4.7.17", "version_affected" : "=" }, { "version_value" : "4.7.17.1", "version_affected" : "=" }, { "version_value" : "4.7.17.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "name" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/firefly-iii/firefly-iii/issues/2337", "name" : "https://github.com/firefly-iii/firefly-iii/issues/2337", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file names. The JavaScript code is executed during attachments/edit/$file_id$ attachment editing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.7.17.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T03:15Z", "lastModifiedDate" : "2019-07-18T15:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13646", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "firefly-iii", "product" : { "product_data" : [ { "product_name" : "firefly_iii", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.0.5", "version_affected" : "=" }, { "version_value" : "3.4.0.6", "version_affected" : "=" }, { "version_value" : "3.4.0.7", "version_affected" : "=" }, { "version_value" : "3.4.0.8", "version_affected" : "=" }, { "version_value" : "3.4.0.9", "version_affected" : "=" }, { "version_value" : "3.4.0.10", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.6.1", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.6.1", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.2.1", "version_affected" : "=" }, { "version_value" : "3.7.2.2", "version_affected" : "=" }, { "version_value" : "3.7.2.3", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.8.1", "version_affected" : "=" }, { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.3", "version_affected" : "=" }, { "version_value" : "3.10.4", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.3.7", "version_affected" : "=" }, { "version_value" : "4.3.8", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.3.1", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.6.8", "version_affected" : "=" }, { "version_value" : "4.6.9", "version_affected" : "=" }, { "version_value" : "4.6.10", "version_affected" : "=" }, { "version_value" : "4.6.11", "version_affected" : "=" }, { "version_value" : "4.6.11.1", "version_affected" : "=" }, { "version_value" : "4.6.12", "version_affected" : "=" }, { "version_value" : "4.6.13", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.1.1", "version_affected" : "=" }, { "version_value" : "4.7.1.2", "version_affected" : "=" }, { "version_value" : "4.7.1.3", "version_affected" : "=" }, { "version_value" : "4.7.1.4", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.2.1", "version_affected" : "=" }, { "version_value" : "4.7.2.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.3.1", "version_affected" : "=" }, { "version_value" : "4.7.3.2", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.5.1", "version_affected" : "=" }, { "version_value" : "4.7.5.2", "version_affected" : "=" }, { "version_value" : "4.7.5.3", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.6.1", "version_affected" : "=" }, { "version_value" : "4.7.6.2", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.7.11", "version_affected" : "=" }, { "version_value" : "4.7.12", "version_affected" : "=" }, { "version_value" : "4.7.12.1", "version_affected" : "=" }, { "version_value" : "4.7.13", "version_affected" : "=" }, { "version_value" : "4.7.14", "version_affected" : "=" }, { "version_value" : "4.7.15", "version_affected" : "=" }, { "version_value" : "4.7.16", "version_affected" : "=" }, { "version_value" : "4.7.17", "version_affected" : "=" }, { "version_value" : "4.7.17.1", "version_affected" : "=" }, { "version_value" : "4.7.17.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "name" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/firefly-iii/firefly-iii/issues/2339", "name" : "https://github.com/firefly-iii/firefly-iii/issues/2339", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefly III before 4.7.17.3 is vulnerable to reflected XSS due to lack of filtration of user-supplied data in a search query." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.7.17.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T03:15Z", "lastModifiedDate" : "2019-07-18T15:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13647", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "firefly-iii", "product" : { "product_data" : [ { "product_name" : "firefly_iii", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.1.3", "version_affected" : "=" }, { "version_value" : "3.1.4", "version_affected" : "=" }, { "version_value" : "3.1.5", "version_affected" : "=" }, { "version_value" : "3.1.6", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.3.9", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.0.1", "version_affected" : "=" }, { "version_value" : "3.4.0.2", "version_affected" : "=" }, { "version_value" : "3.4.0.3", "version_affected" : "=" }, { "version_value" : "3.4.0.4", "version_affected" : "=" }, { "version_value" : "3.4.0.5", "version_affected" : "=" }, { "version_value" : "3.4.0.6", "version_affected" : "=" }, { "version_value" : "3.4.0.7", "version_affected" : "=" }, { "version_value" : "3.4.0.8", "version_affected" : "=" }, { "version_value" : "3.4.0.9", "version_affected" : "=" }, { "version_value" : "3.4.0.10", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.4.4", "version_affected" : "=" }, { "version_value" : "3.4.4.1", "version_affected" : "=" }, { "version_value" : "3.4.4.2", "version_affected" : "=" }, { "version_value" : "3.4.5", "version_affected" : "=" }, { "version_value" : "3.4.6", "version_affected" : "=" }, { "version_value" : "3.4.6.1", "version_affected" : "=" }, { "version_value" : "3.4.7", "version_affected" : "=" }, { "version_value" : "3.4.8", "version_affected" : "=" }, { "version_value" : "3.4.9", "version_affected" : "=" }, { "version_value" : "3.4.10", "version_affected" : "=" }, { "version_value" : "3.4.11", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.6.1", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.7.2", "version_affected" : "=" }, { "version_value" : "3.7.2.1", "version_affected" : "=" }, { "version_value" : "3.7.2.2", "version_affected" : "=" }, { "version_value" : "3.7.2.3", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.8.1", "version_affected" : "=" }, { "version_value" : "3.8.2", "version_affected" : "=" }, { "version_value" : "3.8.3", "version_affected" : "=" }, { "version_value" : "3.8.4", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.9.1", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.10.1", "version_affected" : "=" }, { "version_value" : "3.10.2", "version_affected" : "=" }, { "version_value" : "3.10.3", "version_affected" : "=" }, { "version_value" : "3.10.4", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.2.0", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "=" }, { "version_value" : "4.3.7", "version_affected" : "=" }, { "version_value" : "4.3.8", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" }, { "version_value" : "4.4.3", "version_affected" : "=" }, { "version_value" : "4.5.0", "version_affected" : "=" }, { "version_value" : "4.6.0", "version_affected" : "=" }, { "version_value" : "4.6.1", "version_affected" : "=" }, { "version_value" : "4.6.2", "version_affected" : "=" }, { "version_value" : "4.6.3", "version_affected" : "=" }, { "version_value" : "4.6.3.1", "version_affected" : "=" }, { "version_value" : "4.6.4", "version_affected" : "=" }, { "version_value" : "4.6.5", "version_affected" : "=" }, { "version_value" : "4.6.6", "version_affected" : "=" }, { "version_value" : "4.6.7", "version_affected" : "=" }, { "version_value" : "4.6.8", "version_affected" : "=" }, { "version_value" : "4.6.9", "version_affected" : "=" }, { "version_value" : "4.6.10", "version_affected" : "=" }, { "version_value" : "4.6.11", "version_affected" : "=" }, { "version_value" : "4.6.11.1", "version_affected" : "=" }, { "version_value" : "4.6.12", "version_affected" : "=" }, { "version_value" : "4.6.13", "version_affected" : "=" }, { "version_value" : "4.7.0", "version_affected" : "=" }, { "version_value" : "4.7.1", "version_affected" : "=" }, { "version_value" : "4.7.1.1", "version_affected" : "=" }, { "version_value" : "4.7.1.2", "version_affected" : "=" }, { "version_value" : "4.7.1.3", "version_affected" : "=" }, { "version_value" : "4.7.1.4", "version_affected" : "=" }, { "version_value" : "4.7.2", "version_affected" : "=" }, { "version_value" : "4.7.2.1", "version_affected" : "=" }, { "version_value" : "4.7.2.2", "version_affected" : "=" }, { "version_value" : "4.7.3", "version_affected" : "=" }, { "version_value" : "4.7.3.1", "version_affected" : "=" }, { "version_value" : "4.7.3.2", "version_affected" : "=" }, { "version_value" : "4.7.4", "version_affected" : "=" }, { "version_value" : "4.7.5", "version_affected" : "=" }, { "version_value" : "4.7.5.1", "version_affected" : "=" }, { "version_value" : "4.7.5.2", "version_affected" : "=" }, { "version_value" : "4.7.5.3", "version_affected" : "=" }, { "version_value" : "4.7.6", "version_affected" : "=" }, { "version_value" : "4.7.6.1", "version_affected" : "=" }, { "version_value" : "4.7.6.2", "version_affected" : "=" }, { "version_value" : "4.7.7", "version_affected" : "=" }, { "version_value" : "4.7.8", "version_affected" : "=" }, { "version_value" : "4.7.9", "version_affected" : "=" }, { "version_value" : "4.7.10", "version_affected" : "=" }, { "version_value" : "4.7.11", "version_affected" : "=" }, { "version_value" : "4.7.12", "version_affected" : "=" }, { "version_value" : "4.7.12.1", "version_affected" : "=" }, { "version_value" : "4.7.13", "version_affected" : "=" }, { "version_value" : "4.7.14", "version_affected" : "=" }, { "version_value" : "4.7.15", "version_affected" : "=" }, { "version_value" : "4.7.16", "version_affected" : "=" }, { "version_value" : "4.7.17", "version_affected" : "=" }, { "version_value" : "4.7.17.1", "version_affected" : "=" }, { "version_value" : "4.7.17.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "name" : "https://github.com/firefly-iii/firefly-iii/compare/a70b7cc...7d482aa", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] }, { "url" : "https://github.com/firefly-iii/firefly-iii/issues/2338", "name" : "https://github.com/firefly-iii/firefly-iii/issues/2338", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Firefly III before 4.7.17.3 is vulnerable to stored XSS due to lack of filtration of user-supplied data in image file content. The JavaScript code is executed during attachments/view/$file_id$ attachment viewing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:firefly-iii:firefly_iii:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.7.17.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T03:15Z", "lastModifiedDate" : "2019-07-18T15:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13648", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://patchwork.ozlabs.org/patch/1133904/", "name" : "https://patchwork.ozlabs.org/patch/1133904/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/powerpc/kernel/signal_32.c and arch/powerpc/kernel/signal_64.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T13:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13915", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/b3log/wide/issues/355", "name" : "https://github.com/b3log/wide/issues/355", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create a symlink, and then place the symlink into a ZIP archive. An unzip operation leads to read access, and write access (depending on file permissions), to the symlink target. Third, the attacker can import a Git repository that contains a symlink, similarly leading to read and write access." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T15:15Z", "lastModifiedDate" : "2019-07-18T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13948", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "syguestbook_a5_project", "product" : { "product_data" : [ { "product_name" : "syguestbook_a5", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "name" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "name" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:syguestbook_a5_project:syguestbook_a5:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-19T03:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13949", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "syguestbook_a5_project", "product" : { "product_data" : [ { "product_name" : "syguestbook_a5", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "name" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "name" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:syguestbook_a5_project:syguestbook_a5:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-19T03:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13950", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "syguestbook_a5_project", "product" : { "product_data" : [ { "product_name" : "syguestbook_a5", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "name" : "https://fragrant10.github.io/2019/02/22/SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.html", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "name" : "https://github.com/fragrant10/fragrant10.github.io/blob/master/_posts/2019-02-22-SyGuestBookA5%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:syguestbook_a5_project:syguestbook_a5:1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-19T03:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13951", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gdnsd", "product" : { "product_data" : [ { "product_name" : "gdnsd", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/gdnsd/gdnsd/issues/185", "name" : "https://github.com/gdnsd/gdnsd/issues/185", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gdnsd:gdnsd:3.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-19T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13952", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gdnsd", "product" : { "product_data" : [ { "product_name" : "gdnsd", "version" : { "version_data" : [ { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/gdnsd/gdnsd/issues/185", "name" : "https://github.com/gdnsd/gdnsd/issues/185", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gdnsd:gdnsd:3.2.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T17:15Z", "lastModifiedDate" : "2019-07-19T17:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13956", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://esoln.net/esoln/blog/2019/06/14/discuzml-v-3-x-code-injection-vulnerability/", "name" : "http://esoln.net/esoln/blog/2019/06/14/discuzml-v-3-x-code-injection-vulnerability/", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Discuz!ML 3.2 through 3.4 allows remote attackers to execute arbitrary PHP code via a modified language cookie, as demonstrated by changing 4gH4_0df5_language=en to 4gH4_0df5_language=en'.phpinfo().'; (if the random prefix 4gH4_0df5_ were used)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13959", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "axiosys", "product" : { "product_data" : [ { "product_name" : "bento4", "version" : { "version_data" : [ { "version_value" : "1.5.1-627", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-476" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/axiomatic-systems/Bento4/issues/394", "name" : "https://github.com/axiomatic-systems/Bento4/issues/394", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Bento4 1.5.1-627, AP4_DataBuffer::SetDataSize does not handle reallocation failures, leading to a memory copy into a NULL pointer. This is different from CVE-2018-20186." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:axiosys:bento4:1.5.1-627:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-19T18:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13960", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/libjpeg-turbo/libjpeg-turbo/issues/337", "name" : "https://github.com/libjpeg-turbo/libjpeg-turbo/issues/337", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf", "name" : "https://libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** In libjpeg-turbo 2.0.2, a large amount of memory can be used during processing of an invalid progressive JPEG image containing incorrect width and height values in the image header. NOTE: the vendor's expectation, for use cases in which this memory usage would be a denial of service, is that the application should interpret libjpeg warnings as fatal errors (aborting decompression) and/or set limits on resource consumption or image sizes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13961", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "flatcore", "product" : { "product_data" : [ { "product_name" : "flatcore", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.7.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/flatCore/flatCore-CMS/compare/35fee64...de90af3", "name" : "https://github.com/flatCore/flatCore-CMS/compare/35fee64...de90af3", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://github.com/flatCore/flatCore-CMS/issues/39", "name" : "https://github.com/flatCore/flatCore-CMS/issues/39", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CSRF vulnerability was found in flatCore before 1.5, leading to the upload of arbitrary .php files via acp/core/files.upload-script.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.5" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T20:15Z", "lastModifiedDate" : "2019-07-19T18:34Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13962", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commit;h=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509", "name" : "http://git.videolan.org/?p=vlc/vlc-3.0.git;a=commit;h=2b4f9d0b0e0861f262c90e9b9b94e7d53b864509", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://trac.videolan.org/vlc/ticket/22240", "name" : "https://trac.videolan.org/vlc/ticket/22240", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T20:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13969", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "metinfo", "product" : { "product_data" : [ { "product_name" : "metinfo", "version" : { "version_data" : [ { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.md", "name" : "https://github.com/zhuxianjin/vuln_repo/blob/master/Metinfo%206.x%20Background%20SQL%20injection.md", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Metinfo 6.x allows SQL Injection via the id parameter in an admin/index.php?n=ui_set&m=admin&c=index&a=doget_text_content&table=lang&field=1 request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:metinfo:metinfo:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.0.0", "versionEndIncluding" : "6.2.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-19T06:15Z", "lastModifiedDate" : "2019-07-19T17:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13970", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/AntSwordProject/antSword/commit/4b932e81447b4b0475f4fce45525547395c249d3", "name" : "https://github.com/AntSwordProject/antSword/commit/4b932e81447b4b0475f4fce45525547395c249d3", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/AntSwordProject/antSword/compare/ed01dea...834063a", "name" : "https://github.com/AntSwordProject/antSword/compare/ed01dea...834063a", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/AntSwordProject/antSword/issues/151", "name" : "https://github.com/AntSwordProject/antSword/issues/151", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T06:15Z", "lastModifiedDate" : "2019-07-19T13:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13971", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://cisk123456.blogspot.com/2019/05/otcms-xss.html", "name" : "https://cisk123456.blogspot.com/2019/05/otcms-xss.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T13:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13972", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "layerbb", "product" : { "product_data" : [ { "product_name" : "layerbb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "name" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:layerbb:layerbb:1.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T14:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13973", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "layerbb", "product" : { "product_data" : [ { "product_name" : "layerbb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-434" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "name" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:layerbb:layerbb:1.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T14:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13974", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "layerbb", "product" : { "product_data" : [ { "product_name" : "layerbb", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "name" : "http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/", "refsource" : "MISC", "tags" : [ "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LayerBB 1.1.3 allows conversations.php/cmd/new CSRF." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:layerbb:layerbb:1.1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T14:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13977", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ovidentia", "product" : { "product_data" : [ { "product_name" : "ovidentia", "version" : { "version_data" : [ { "version_value" : "8.4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitXSSOvidentia.txt", "name" : "https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitXSSOvidentia.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "index.php in Ovidentia 8.4.3 has XSS via tg=groups, tg=maildoms&idx=create&userid=0&bgrp=y, tg=delegat, tg=site&idx=create, tg=site&item=4, tg=admdir&idx=mdb&id=1, tg=notes&idx=Create, tg=admfaqs&idx=Add, or tg=admoc&idx=addoc&item=." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ovidentia:ovidentia:8.4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T18:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13978", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ovidentia", "product" : { "product_data" : [ { "product_name" : "ovidentia", "version" : { "version_data" : [ { "version_value" : "8.4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitSQLIOvidentia.txt", "name" : "https://github.com/Kitsun3Sec/exploits/blob/master/cms/ovidentia/exploitSQLIOvidentia.txt", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ovidentia 8.4.3 has SQL Injection via the id parameter in an index.php?tg=delegat&idx=mem request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ovidentia:ovidentia:8.4.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-19T07:15Z", "lastModifiedDate" : "2019-07-19T18:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13979", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/api/issues/979", "name" : "https://github.com/directus/api/issues/979", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/directus/api/projects/42", "name" : "https://github.com/directus/api/projects/42", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13980", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/api/issues/979", "name" : "https://github.com/directus/api/issues/979", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code execution with nginx." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13981", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/api/issues/986", "name" : "https://github.com/directus/api/issues/986", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/directus/api/issues/987", "name" : "https://github.com/directus/api/issues/987", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which the file collection can be non-public, but this option does not apply to the thumbnailer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13982", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/app/commit/f010b49eef1526fe0882078bb4a07688e8cc92c1", "name" : "https://github.com/directus/app/commit/f010b49eef1526fe0882078bb4a07688e8cc92c1", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "interfaces/markdown/input.vue in Directus 7 Application before 7.7.0 does not sanitize Markdown text before rendering a preview." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13983", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/api/issues/991", "name" : "https://github.com/directus/api/issues/991", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/directus/api/projects/43", "name" : "https://github.com/directus/api/projects/43", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13984", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/directus/api/issues/981", "name" : "https://github.com/directus/api/issues/981", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://github.com/directus/api/projects/44", "name" : "https://github.com/directus/api/projects/44", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demonstrated by the EICAR Anti-Virus Test File." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T15:15Z", "lastModifiedDate" : "2019-07-19T15:55Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13989", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gitlab.com/aplevich/dpic/issues/4", "name" : "https://gitlab.com/aplevich/dpic/issues/4", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T20:15Z", "lastModifiedDate" : "2019-07-19T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-13991", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://arxiv.org/abs/1907.00479", "name" : "https://arxiv.org/abs/1907.00479", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T21:15Z", "lastModifiedDate" : "2019-07-19T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1575", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "paloaltonetworks", "product" : { "product_data" : [ { "product_name" : "pan-os", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.1.8", "version_affected" : "=" }, { "version_value" : "4.1.8-h3", "version_affected" : "=" }, { "version_value" : "4.1.9", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.1.11", "version_affected" : "=" }, { "version_value" : "4.1.12", "version_affected" : "=" }, { "version_value" : "4.1.13", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.0-h1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.4", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.0.6", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" }, { "version_value" : "5.0.8", "version_affected" : "=" }, { "version_value" : "5.0.9", "version_affected" : "=" }, { "version_value" : "5.0.10", "version_affected" : "=" }, { "version_value" : "5.0.11", "version_affected" : "=" }, { "version_value" : "5.0.12", "version_affected" : "=" }, { "version_value" : "5.0.13", "version_affected" : "=" }, { "version_value" : "5.0.14", "version_affected" : "=" }, { "version_value" : "5.0.15", "version_affected" : "=" }, { "version_value" : "5.0.16", "version_affected" : "=" }, { "version_value" : "5.0.17", "version_affected" : "=" }, { "version_value" : "5.0.18", "version_affected" : "=" }, { "version_value" : "5.0.19", "version_affected" : "=" }, { "version_value" : "5.0.20", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" }, { "version_value" : "5.1.7", "version_affected" : "=" }, { "version_value" : "5.1.8", "version_affected" : "=" }, { "version_value" : "5.1.9", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.0.7", "version_affected" : "=" }, { "version_value" : "6.0.8", "version_affected" : "=" }, { "version_value" : "6.0.9", "version_affected" : "=" }, { "version_value" : "6.0.10", "version_affected" : "=" }, { "version_value" : "6.0.11", "version_affected" : "=" }, { "version_value" : "6.0.12", "version_affected" : "=" }, { "version_value" : "6.0.13", "version_affected" : "=" }, { "version_value" : "6.0.14", "version_affected" : "=" }, { "version_value" : "6.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.1.4", "version_affected" : "=" }, { "version_value" : "6.1.5", "version_affected" : "=" }, { "version_value" : "6.1.6", "version_affected" : "=" }, { "version_value" : "6.1.7", "version_affected" : "=" }, { "version_value" : "6.1.8", "version_affected" : "=" }, { "version_value" : "6.1.9", "version_affected" : "=" }, { "version_value" : "6.1.10", "version_affected" : "=" }, { "version_value" : "6.1.11", "version_affected" : "=" }, { "version_value" : "6.1.12", "version_affected" : "=" }, { "version_value" : "6.1.13", "version_affected" : "=" }, { "version_value" : "6.1.14", "version_affected" : "=" }, { "version_value" : "6.1.15", "version_affected" : "=" }, { "version_value" : "6.1.16", "version_affected" : "=" }, { "version_value" : "6.1.17", "version_affected" : "=" }, { "version_value" : "6.1.18", "version_affected" : "=" }, { "version_value" : "6.1.19", "version_affected" : "=" }, { "version_value" : "6.1.20", "version_affected" : "=" }, { "version_value" : "6.1.21", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.0.5", "version_affected" : "=" }, { "version_value" : "7.0.5-h2", "version_affected" : "=" }, { "version_value" : "7.0.6", "version_affected" : "=" }, { "version_value" : "7.0.7", "version_affected" : "=" }, { "version_value" : "7.0.8", "version_affected" : "=" }, { "version_value" : "7.0.9", "version_affected" : "=" }, { "version_value" : "7.0.10", "version_affected" : "=" }, { "version_value" : "7.0.11", "version_affected" : "=" }, { "version_value" : "7.0.12", "version_affected" : "=" }, { "version_value" : "7.0.13", "version_affected" : "=" }, { "version_value" : "7.0.14", "version_affected" : "=" }, { "version_value" : "7.0.15", "version_affected" : "=" }, { "version_value" : "7.0.16", "version_affected" : "=" }, { "version_value" : "7.0.17", "version_affected" : "=" }, { "version_value" : "7.0.18", "version_affected" : "=" }, { "version_value" : "7.0.19", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.4-h2", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.1.7", "version_affected" : "=" }, { "version_value" : "7.1.8", "version_affected" : "=" }, { "version_value" : "7.1.9", "version_affected" : "=" }, { "version_value" : "7.1.10", "version_affected" : "=" }, { "version_value" : "7.1.11", "version_affected" : "=" }, { "version_value" : "7.1.12", "version_affected" : "=" }, { "version_value" : "7.1.13", "version_affected" : "=" }, { "version_value" : "7.1.14", "version_affected" : "=" }, { "version_value" : "7.1.15", "version_affected" : "=" }, { "version_value" : "7.1.16", "version_affected" : "=" }, { "version_value" : "7.1.17", "version_affected" : "=" }, { "version_value" : "7.1.18", "version_affected" : "=" }, { "version_value" : "8.0.0", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.0.7", "version_affected" : "=" }, { "version_value" : "8.0.8", "version_affected" : "=" }, { "version_value" : "8.0.9", "version_affected" : "=" }, { "version_value" : "8.0.10", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "8.1.8", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109176", "name" : "109176", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/157", "name" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/157", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API key of the device and/or the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionEndExcluding" : "7.1.24" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.0.0", "versionEndExcluding" : "8.0.19" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.1.0", "versionEndIncluding" : "8.1.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:8.1.8:h4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.1.9", "versionEndIncluding" : "9.0.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-19T18:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1576", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "paloaltonetworks", "product" : { "product_data" : [ { "product_name" : "pan-os", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "3.1.9", "version_affected" : "=" }, { "version_value" : "3.1.10", "version_affected" : "=" }, { "version_value" : "3.1.11", "version_affected" : "=" }, { "version_value" : "3.1.12", "version_affected" : "=" }, { "version_value" : "4.0.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "=" }, { "version_value" : "4.0.6", "version_affected" : "=" }, { "version_value" : "4.0.7", "version_affected" : "=" }, { "version_value" : "4.0.8", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "4.0.10", "version_affected" : "=" }, { "version_value" : "4.0.11", "version_affected" : "=" }, { "version_value" : "4.0.12", "version_affected" : "=" }, { "version_value" : "4.0.13", "version_affected" : "=" }, { "version_value" : "4.1.0", "version_affected" : "=" }, { "version_value" : "4.1.1", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.4", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.1.7", "version_affected" : "=" }, { "version_value" : "4.1.8", "version_affected" : "=" }, { "version_value" : "4.1.8-h3", "version_affected" : "=" }, { "version_value" : "4.1.9", "version_affected" : "=" }, { "version_value" : "4.1.10", "version_affected" : "=" }, { "version_value" : "4.1.11", "version_affected" : "=" }, { "version_value" : "4.1.12", "version_affected" : "=" }, { "version_value" : "4.1.13", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.0-h1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "5.0.3", "version_affected" : "=" }, { "version_value" : "5.0.4", "version_affected" : "=" }, { "version_value" : "5.0.5", "version_affected" : "=" }, { "version_value" : "5.0.6", "version_affected" : "=" }, { "version_value" : "5.0.7", "version_affected" : "=" }, { "version_value" : "5.0.8", "version_affected" : "=" }, { "version_value" : "5.0.9", "version_affected" : "=" }, { "version_value" : "5.0.10", "version_affected" : "=" }, { "version_value" : "5.0.11", "version_affected" : "=" }, { "version_value" : "5.0.12", "version_affected" : "=" }, { "version_value" : "5.0.13", "version_affected" : "=" }, { "version_value" : "5.0.14", "version_affected" : "=" }, { "version_value" : "5.0.15", "version_affected" : "=" }, { "version_value" : "5.0.16", "version_affected" : "=" }, { "version_value" : "5.0.17", "version_affected" : "=" }, { "version_value" : "5.0.18", "version_affected" : "=" }, { "version_value" : "5.0.19", "version_affected" : "=" }, { "version_value" : "5.0.20", "version_affected" : "=" }, { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.1.4", "version_affected" : "=" }, { "version_value" : "5.1.5", "version_affected" : "=" }, { "version_value" : "5.1.6", "version_affected" : "=" }, { "version_value" : "5.1.7", "version_affected" : "=" }, { "version_value" : "5.1.8", "version_affected" : "=" }, { "version_value" : "5.1.9", "version_affected" : "=" }, { "version_value" : "5.1.10", "version_affected" : "=" }, { "version_value" : "5.1.11", "version_affected" : "=" }, { "version_value" : "5.1.12", "version_affected" : "=" }, { "version_value" : "5.1.13", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.3", "version_affected" : "=" }, { "version_value" : "6.0.4", "version_affected" : "=" }, { "version_value" : "6.0.5", "version_affected" : "=" }, { "version_value" : "6.0.6", "version_affected" : "=" }, { "version_value" : "6.0.7", "version_affected" : "=" }, { "version_value" : "6.0.8", "version_affected" : "=" }, { "version_value" : "6.0.9", "version_affected" : "=" }, { "version_value" : "6.0.10", "version_affected" : "=" }, { "version_value" : "6.0.11", "version_affected" : "=" }, { "version_value" : "6.0.12", "version_affected" : "=" }, { "version_value" : "6.0.13", "version_affected" : "=" }, { "version_value" : "6.0.14", "version_affected" : "=" }, { "version_value" : "6.0.15", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.1.2", "version_affected" : "=" }, { "version_value" : "6.1.3", "version_affected" : "=" }, { "version_value" : "6.1.4", "version_affected" : "=" }, { "version_value" : "6.1.5", "version_affected" : "=" }, { "version_value" : "6.1.6", "version_affected" : "=" }, { "version_value" : "6.1.7", "version_affected" : "=" }, { "version_value" : "6.1.8", "version_affected" : "=" }, { "version_value" : "6.1.9", "version_affected" : "=" }, { "version_value" : "6.1.10", "version_affected" : "=" }, { "version_value" : "6.1.11", "version_affected" : "=" }, { "version_value" : "6.1.12", "version_affected" : "=" }, { "version_value" : "6.1.13", "version_affected" : "=" }, { "version_value" : "6.1.14", "version_affected" : "=" }, { "version_value" : "6.1.15", "version_affected" : "=" }, { "version_value" : "6.1.16", "version_affected" : "=" }, { "version_value" : "6.1.17", "version_affected" : "=" }, { "version_value" : "6.1.18", "version_affected" : "=" }, { "version_value" : "6.1.19", "version_affected" : "=" }, { "version_value" : "6.1.20", "version_affected" : "=" }, { "version_value" : "6.1.21", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.0.5", "version_affected" : "=" }, { "version_value" : "7.0.5-h2", "version_affected" : "=" }, { "version_value" : "7.0.6", "version_affected" : "=" }, { "version_value" : "7.0.7", "version_affected" : "=" }, { "version_value" : "7.0.8", "version_affected" : "=" }, { "version_value" : "7.0.9", "version_affected" : "=" }, { "version_value" : "7.0.10", "version_affected" : "=" }, { "version_value" : "7.0.11", "version_affected" : "=" }, { "version_value" : "7.0.12", "version_affected" : "=" }, { "version_value" : "7.0.13", "version_affected" : "=" }, { "version_value" : "7.0.14", "version_affected" : "=" }, { "version_value" : "7.0.15", "version_affected" : "=" }, { "version_value" : "7.0.16", "version_affected" : "=" }, { "version_value" : "7.0.17", "version_affected" : "=" }, { "version_value" : "7.0.18", "version_affected" : "=" }, { "version_value" : "7.0.19", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.4-h2", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.1.7", "version_affected" : "=" }, { "version_value" : "7.1.8", "version_affected" : "=" }, { "version_value" : "7.1.9", "version_affected" : "=" }, { "version_value" : "7.1.10", "version_affected" : "=" }, { "version_value" : "7.1.11", "version_affected" : "=" }, { "version_value" : "7.1.12", "version_affected" : "=" }, { "version_value" : "7.1.13", "version_affected" : "=" }, { "version_value" : "7.1.14", "version_affected" : "=" }, { "version_value" : "7.1.15", "version_affected" : "=" }, { "version_value" : "7.1.16", "version_affected" : "=" }, { "version_value" : "7.1.17", "version_affected" : "=" }, { "version_value" : "7.1.18", "version_affected" : "=" }, { "version_value" : "8.0.1", "version_affected" : "=" }, { "version_value" : "8.0.2", "version_affected" : "=" }, { "version_value" : "8.0.3", "version_affected" : "=" }, { "version_value" : "8.0.4", "version_affected" : "=" }, { "version_value" : "8.0.5", "version_affected" : "=" }, { "version_value" : "8.0.6", "version_affected" : "=" }, { "version_value" : "8.0.7", "version_affected" : "=" }, { "version_value" : "8.0.8", "version_affected" : "=" }, { "version_value" : "8.0.9", "version_affected" : "=" }, { "version_value" : "8.0.10", "version_affected" : "=" }, { "version_value" : "8.0.11", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/156", "name" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/156", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user?s permissions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionEndExcluding" : "7.1.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.1.1", "versionEndExcluding" : "8.0.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.0.1", "versionEndExcluding" : "8.1.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.1.1", "versionEndExcluding" : "9.0.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T14:15Z", "lastModifiedDate" : "2019-07-18T14:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1579", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/158", "name" : "https://securityadvisories.paloaltonetworks.com/Home/Detail/158", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T22:15Z", "lastModifiedDate" : "2019-07-19T22:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1855", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "jabber", "version" : { "version_data" : [ { "version_value" : "11.9(2)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109038", "name" : "109038", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-jabber-dll", "name" : "20190703 Cisco Jabber for Windows DLL Preloading Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources loaded by the application at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. The malicious DLL file would execute when the Jabber application launches. A successful exploit could allow the attacker to execute arbitrary code on the target machine with the privileges of another user's account." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:jabber:11.9\\(2\\):*:*:*:*:windows:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-04T20:15Z", "lastModifiedDate" : "2019-07-12T14:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1873", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "asa_5506-x_firmware", "version" : { "version_data" : [ { "version_value" : "9.6(4.16)", "version_affected" : "=" }, { "version_value" : "9.8(3.8)", "version_affected" : "=" } ] } }, { "product_name" : "asa_5506h-x_firmware", "version" : { "version_data" : [ { "version_value" : "9.6(4.16)", "version_affected" : "=" }, { "version_value" : "9.8(3.8)", "version_affected" : "=" } ] } }, { "product_name" : "asa_5506w-x_firmware", "version" : { "version_data" : [ { "version_value" : "9.6(4.16)", "version_affected" : "=" }, { "version_value" : "9.8(3.8)", "version_affected" : "=" } ] } }, { "product_name" : "asa_5508-x_firmware", "version" : { "version_data" : [ { "version_value" : "9.6(4.16)", "version_affected" : "=" }, { "version_value" : "9.8(3.8)", "version_affected" : "=" } ] } }, { "product_name" : "asa_5516-x_firmware", "version" : { "version_data" : [ { "version_value" : "9.6(4.16)", "version_affected" : "=" }, { "version_value" : "9.8(3.8)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109123", "name" : "109123", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190710-asa-ftd-dos", "name" : "20190710 Cisco ASA and FTD Software Cryptographic TLS and SSL Driver Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly. The vulnerability is due to incomplete input validation of a Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ingress packet header. An attacker could exploit this vulnerability by sending a crafted TLS/SSL packet to an interface on the targeted device. An exploit could allow the attacker to cause the device to reload, which will result in a denial of service (DoS) condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed and transparent firewall mode and in single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. A valid SSL or TLS session is required to exploit this vulnerability." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506-x_firmware:9.6\\(4.16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506-x_firmware:9.8\\(3.8\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5506-x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506h-x_firmware:9.6\\(4.16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506h-x_firmware:9.8\\(3.8\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506w-x_firmware:9.6\\(4.16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5506w-x_firmware:9.8\\(3.8\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5508-x_firmware:9.6\\(4.16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5508-x_firmware:9.8\\(3.8\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5516-x_firmware:9.6\\(4.16\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asa_5516-x_firmware:9.8\\(3.8\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T18:15Z", "lastModifiedDate" : "2019-07-18T17:38Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1884", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "web_security_appliance", "version" : { "version_data" : [ { "version_value" : "10.1.4-017", "version_affected" : "=" }, { "version_value" : "10.5.2-072", "version_affected" : "=" }, { "version_value" : "11.5.1-fcs-125", "version_affected" : "=" }, { "version_value" : "11.7.0-256", "version_affected" : "=" } ] } }, { "product_name" : "asyncos", "version" : { "version_data" : [ { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1-230", "version_affected" : "=" }, { "version_value" : "10.1.1-234", "version_affected" : "=" }, { "version_value" : "10.1.1-235", "version_affected" : "=" }, { "version_value" : "10.1.2-036", "version_affected" : "=" }, { "version_value" : "10.1.3-054", "version_affected" : "=" }, { "version_value" : "10.1.4-007", "version_affected" : "=" }, { "version_value" : "11.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-asyncos-wsa", "name" : "20190703 Cisco Web Security Appliance Web Proxy Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation mechanisms for certain fields in HTTP/HTTPS requests sent through an affected device. A successful attacker could exploit this vulnerability by sending a malicious HTTP/HTTPS request through an affected device. An exploit could allow the attacker to force the device to stop processing traffic, resulting in a DoS condition." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.1", "versionEndExcluding" : "10.5.5-005" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.5", "versionEndExcluding" : "11.5.2-020" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.7", "versionEndExcluding" : "11.7.0-407" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:10.1.4-017:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:10.5.2-072:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:11.5.1-fcs-125:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:11.7.0-256:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-04T20:15Z", "lastModifiedDate" : "2019-07-15T13:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1886", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "web_security_appliance", "version" : { "version_data" : [ { "version_value" : "10.5.2-072", "version_affected" : "=" }, { "version_value" : "10.5.3-025", "version_affected" : "=" }, { "version_value" : "11.7.0-fcs-334", "version_affected" : "=" } ] } }, { "product_name" : "asyncos", "version" : { "version_data" : [ { "version_value" : "11.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109049", "name" : "109049", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-wsa-dos", "name" : "20190703 Cisco Web Security Appliance HTTPS Certificate Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of Secure Sockets Layer (SSL) server certificates. An attacker could exploit this vulnerability by installing a malformed certificate in a web server and sending a request to it through the Cisco WSA. A successful exploit could allow the attacker to cause an unexpected restart of the proxy process on an affected device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "versionStartIncluding" : "10.5", "versionEndExcluding" : "10.5.5-005" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "versionStartIncluding" : "11.5", "versionEndExcluding" : "11.5.2-020" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:10.5.2-072:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:10.5.3-025:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:web_security_appliance:11.7.0-fcs-334:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-04T20:15Z", "lastModifiedDate" : "2019-07-15T13:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1889", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_policy_infrastructure_controller", "version" : { "version_data" : [ { "version_value" : "4.1(1j)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-ccapic-restapi", "name" : "20190703 Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checking for the file path when specific software is uploaded. An attacker could exploit this vulnerability by uploading malicious software using the REST API. A successful exploit could allow an attacker to escalate their privilege level to root. The attacker would need to have the administrator role on the device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.1\\(1j\\):*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-04T20:15Z", "lastModifiedDate" : "2019-07-15T13:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1890", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "application_policy_infrastructure_controller", "version" : { "version_data" : [ { "version_value" : "7.3(0)zn(0.113)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109052", "name" : "109052", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-n9kaci-bypass", "name" : "20190703 Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the infrastructure VLAN. The vulnerability is due to insufficient security requirements during the Link Layer Discovery Protocol (LLDP) setup phase of the infrastructure VLAN. An attacker could exploit this vulnerability by sending a malicious LLDP packet on the adjacent subnet to the Cisco Nexus 9000 Series Switch in ACI mode. A successful exploit could allow the attacker to connect an unauthorized server to the infrastructure VLAN, which is highly privileged. With a connection to the infrastructure VLAN, the attacker can make unauthorized connections to Cisco Application Policy Infrastructure Controller (APIC) services or join other host endpoints." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:7.3\\(0\\)zn\\(0.113\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:9432pq:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:9536pq:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:9636pq:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:9736pq:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9432c-s:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9464px:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9464tx2:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9564px:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9564tx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9636c-r:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9636c-rx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x97160yc-ex:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9732c-ex:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9732c-fx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9736c-ex:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9736c-fx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:n9k-x9788tc-fx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:x9636q-r:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 6.5, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-04T20:15Z", "lastModifiedDate" : "2019-07-11T13:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1891", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-dos", "name" : "20190703 Cisco Small Business Series Switches HTTP Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-18_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-18:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-26_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-26:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-26p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-26p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-50_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-50:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-50p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-50p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28sfp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28sfp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x24mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x24mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500xg8f8t_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500xg8f8t:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:esw2-350g52dc_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:esw2-350g52dc:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:esw2-550x48dc_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:esw2-550x48dc:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-17T13:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1892", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt", "name" : "20190703 Cisco Small Business Series Switches Memory Corruption Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf200-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf200-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-18_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-18:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-26_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-26:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-26p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-26p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-50_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-50:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg200-50p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg200-50p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-28sfp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-28sfp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-24mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-24mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sf500-48mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sf500-48mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x24mpp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x24mpp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500x-48mp_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500x-48mp:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:sg500xg8f8t_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:sg500xg8f8t:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:esw2-350g52dc_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:esw2-350g52dc:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:esw2-550x48dc_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.4.10.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:esw2-550x48dc:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-17T14:35Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1893", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "enterprise_nfv_infrastructure_software", "version" : { "version_data" : [ { "version_value" : "3.9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-commandinj", "name" : "20190703 Cisco Enterprise NFV Infrastructure Software Command Injection Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device as root. The vulnerability is due to insufficient input validation of a configuration file that is accessible to a local shell user. An attacker could exploit this vulnerability by including malicious input during the execution of this file. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS as root." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1894", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "enterprise_nfv_infrastructure_software", "version" : { "version_data" : [ { "version_value" : "3.9.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-nfvis-file-readwrite", "name" : "20190703 Cisco Enterprise NFV Infrastructure Software Arbitrary File Read and Write Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker with administrator privileges to overwrite or read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to improper input validation in NFVIS filesystem commands. An attacker could exploit this vulnerability by using crafted variables during the execution of an affected command. A successful exploit could allow the attacker to overwrite or read arbitrary files on the underlying OS." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:05Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1909", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios_xr", "version" : { "version_data" : [ { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "5.0.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0_base", "version_affected" : "=" }, { "version_value" : "5.1.0", "version_affected" : "=" }, { "version_value" : "5.1.1", "version_affected" : "=" }, { "version_value" : "5.1.1.k9sec", "version_affected" : "=" }, { "version_value" : "5.1.2", "version_affected" : "=" }, { "version_value" : "5.1.3", "version_affected" : "=" }, { "version_value" : "5.2.0", "version_affected" : "=" }, { "version_value" : "5.2.1", "version_affected" : "=" }, { "version_value" : "5.2.2", "version_affected" : "=" }, { "version_value" : "5.2.4", "version_affected" : "=" }, { "version_value" : "5.3.0", "version_affected" : "=" }, { "version_value" : "5.3.0_base", "version_affected" : "=" }, { "version_value" : "5.3.2", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.0.2.01", "version_affected" : "=" }, { "version_value" : "6.0_base", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.4.1_base", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dos", "name" : "20190703 Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific set of attributes to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic from explicitly defined peers only. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*", "versionStartIncluding" : "4.3.1", "versionEndExcluding" : "6.6.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9901:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asr_9920:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 5.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-17T14:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1911", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "hosted_collaboration_solution", "version" : { "version_data" : [ { "version_value" : "11.5(3)pb3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-216" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-cucdm-rsh", "name" : "20190703 Cisco Unified Communications Domain Manager Restricted Shell Escape Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell. The vulnerability is due to insufficient input validation of shell commands. An attacker could exploit this vulnerability by executing crafted commands in the shell. A successful exploit could allow the attacker to escape the restricted shell and access commands in the context of the restricted shell user, which does not have root privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:hosted_collaboration_solution:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5(3)pb3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-17T14:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1917", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cvdsd-wmauth", "name" : "20190717 Cisco Vision Dynamic Signage Director REST API Authentication Bypass Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary actions through the REST API with administrative privileges on the affected system. The REST API is enabled by default and cannot be disabled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1919", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cfnm-statcred", "name" : "20190717 Cisco FindIT Network Management Software Static Credentials Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account with static credentials in the underlying Linux operating system. An attacker could exploit this vulnerability by logging in to the command line of the affected VM with the static account. A successful exploit could allow the attacker to log in with root-level privileges. This vulnerability affects only Cisco FindIT Network Manager and Cisco FindIT Network Probe Release 1.1.4 if these products are using Cisco-supplied VM images. No other releases or deployment models are known to be vulnerable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1920", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-aironet-dos", "name" : "20190717 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An attacker could exploit this vulnerability by sending crafted authentication request traffic to the targeted interface, causing the device to restart unexpectedly." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1921", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "email_security_appliance", "version" : { "version_data" : [ { "version_value" : "12.0.0-419", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-esa-bypass", "name" : "20190703 Cisco Email Security Appliance Content Filter Bypass Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker could exploit this vulnerability by naming a malicious attachment with a specific pattern. A successful exploit could allow the attacker to bypass configured content filters that would normally block the attachment." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:email_security_appliance:12.0.0-419:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1922", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ip_conference_phone_7832_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "ip_conference_phone_8832_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_7811_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_7821_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_7841_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_7861_firmware", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8811_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8841_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8845_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8851_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8861_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } }, { "product_name" : "ip_phone_8865_firmware", "version" : { "version_data" : [ { "version_value" : "11.5(1)", "version_affected" : "=" }, { "version_value" : "12.5(1)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-476" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-ip-phone-sip-dos", "name" : "20190703 Cisco IP Phone 7800 and 8800 Series Session Initiation Protocol Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone. The vulnerability is due to insufficient validation of input Session Initiation Protocol (SIP) packets. An attacker could exploit this vulnerability by altering the SIP replies that are sent to the affected phone during the registration process. A successful exploit could allow the attacker to cause the phone to reboot and not complete the registration process." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_conference_phone_7832_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_conference_phone_7832:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_conference_phone_8832_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_conference_phone_8832:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_7811_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_7811:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_7821_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_7821:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_7841_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_7841:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_7861_firmware:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_7861:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8811_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8811_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8811:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8841_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8841_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8841:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8845_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8845_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8845:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8851_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8851_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8851:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8861_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8861_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8861:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8865_firmware:11.5\\(1\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ip_phone_8865_firmware:12.5\\(1\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:ip_phone_8865:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-17T14:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1923", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109294", "name" : "109294", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-spa500-command", "name" : "20190717 Cisco Small Business SPA500 Series IP Phones Local Command Execution Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An attacker could exploit this vulnerability by accessing the configuration interface, which may require a password, and then accessing the device's physical interface and inserting a USB storage device. A successful exploit could allow the attacker to execute arbitrary commands on the device in an elevated security context. At the time of publication, this vulnerability affected Cisco Small Business SPA500 Series IP Phones firmware releases 7.6.2SR5 and prior." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1930", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "firepower_management_center", "version" : { "version_data" : [ { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-fmc-xss", "name" : "20190703 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1931", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "firepower_management_center", "version" : { "version_data" : [ { "version_value" : "6.2.3", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-fmc-xss", "name" : "20190703 Cisco Firepower Management Center RSS Cross-Site Scripting Vulnerabilities", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:firepower_management_center:6.5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1932", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "advanced_malware_protection_for_endpoints", "version" : { "version_data" : [ { "version_value" : "6.2(3)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-345" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-amp-commandinj", "name" : "20190703 Cisco Advanced Malware Protection for Endpoints Windows Command Injection Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code. The vulnerability is due to insufficient validation of dynamically loaded modules. An attacker could exploit this vulnerability by placing a file in a specific location in the Windows filesystem. A successful exploit could allow the attacker to execute the code with the privileges of the AMP service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:6.2\\(3\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 6.7, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 0.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1933", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "email_security_appliance", "version" : { "version_data" : [ { "version_value" : "11.1.2-023", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-esa-filterpass", "name" : "20190703 Cisco Email Security Appliance Content Filter Bypass Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker could exploit this vulnerability by sending a crafted email message to a recipient protected by the ESA. A successful exploit could allow the attacker to bypass configured message filters and inject arbitrary scripting code inside the email body. The malicious code is not executed by default unless the recipient's email client is configured to execute scripts contained in emails." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:email_security_appliance:11.1.2-023:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 7.4, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 4.0 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-06T02:15Z", "lastModifiedDate" : "2019-07-15T14:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1940", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109296", "name" : "109296", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-wsma-info", "name" : "20190717 Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the Web Services Management Agent (WSMA) feature of Cisco Industrial Network Director (IND) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509 certificate validation when establishing a WSMA connection. An attacker could exploit this vulnerability by supplying a crafted X.509 certificate during the WSMA connection setup phase. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on WSMA connections to the affected software. At the time of publication, this vulnerability affected Cisco IND Software releases prior to 1.7." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1941", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109297", "name" : "109297", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-ise-xss", "name" : "20190717 Cisco Identity Services Engine Cross-Site Scripting Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. At the time of publication, this vulnerability affected Cisco ISE running software releases prior to 2.4.0 Patch 9 and 2.6.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1942", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109283", "name" : "109283", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-ise-sql-inject", "name" : "20190717 Cisco Identity Services Engine Blind SQL Injection Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the sponsor portal web interface for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to impact the integrity of an affected system by executing arbitrary SQL queries. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted input that includes SQL statements to an affected system. A successful exploit could allow the attacker to modify entries in some database tables, affecting the integrity of the data. At the time of publication, this vulnerability affected Cisco ISE running software releases 2.6.0 and prior." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-1943", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109288", "name" : "109288", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect", "name" : "20190717 Cisco Small Business Series Switches Open Redirect Vulnerability", "refsource" : "CISCO", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3415", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zte", "product" : { "product_data" : [ { "product_name" : "zxmw_nr8000_firmware", "version" : { "version_data" : [ { "version_value" : "2.4.4.03", "version_affected" : "=" }, { "version_value" : "2.4.4.04", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011082", "name" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011082", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ZTE MW NR8000V2.4.4.03 and NR8000V2.4.4.04 are impacted by path traversal vulnerability. Due to path traversal,users can download any files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:zte:zxmw_nr8000_firmware:2.4.4.03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:zte:zxmw_nr8000_firmware:2.4.4.04:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:zte:zxmw_nr8000:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.7, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.1, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.7 }, "severity" : "LOW", "exploitabilityScore" : 5.1, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-17T18:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3570", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/facebook/hhvm/commit/cc331e4349e91706a673e2a09f1f2ea5bbb33815", "name" : "https://github.com/facebook/hhvm/commit/cc331e4349e91706a673e2a09f1f2ea5bbb33815", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://hhvm.com/blog/2019/06/10/hhvm-4.9.0.html", "name" : "https://hhvm.com/blog/2019/06/10/hhvm-4.9.0.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would attempt to verify it by re-running scrypt_enc() with the same parameters. This could result in information disclosure, memory being overwriten or crashes of the HHVM process. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3571", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.facebook.com/security/advisories/cve-2019-3571", "name" : "https://www.facebook.com/security/advisories/cve-2019-3571", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An input validation issue affected WhatsApp Desktop versions prior to 0.3.3793 which allows malicious clients to send files to users that would be displayed with a wrong extension." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-16T21:15Z", "lastModifiedDate" : "2019-07-17T00:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3592", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10288", "name" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10288", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T18:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3734", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/details/535028/DSA-2019-086-Dell-EMC-Unity-Family-Multiple-Vulnerabilities", "name" : "https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/details/535028/DSA-2019-086-Dell-EMC-Unity-Family-Multiple-Vulnerabilities", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain an improper authorization vulnerability in NAS Server quotas configuration. A remote authenticated Unisphere Operator could potentially exploit this vulnerability to edit quota configuration of other users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T17:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3741", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/details/535028/DSA-2019-086-Dell-EMC-Unity-Family-Multiple-Vulnerabilities", "name" : "https://productsecurity-ux.ausmp1z1.pcf.dell.com/support/security/us/en/04/details/535028/DSA-2019-086-Dell-EMC-Unity-Family-Multiple-Vulnerabilities", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability. A Unisphere user?s (including the admin privilege user) password is stored in a plain text in Unity Data Collection bundle (logs files for troubleshooting). A local authenticated attacker with access to the Data Collection bundle may use the exposed password to gain access with the privileges of the compromised user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T17:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3794", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cloudfoundry.org/blog/cve-2019-3794", "name" : "https://www.cloudfoundry.org/blog/cve-2019-3794", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cloud Foundry UAA, versions prior to v73.4.0, does not set an X-FRAME-OPTIONS header on various endpoints. A remote user can perform clickjacking attacks on UAA's frontend sites." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3854", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-11T19:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3889", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "openshift_container_platform", "version" : { "version_data" : [ { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" }, { "version_value" : "3.9", "version_affected" : "=" }, { "version_value" : "3.10", "version_affected" : "=" }, { "version_value" : "3.11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3889", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3889", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform versions: openshift-online-3, openshift-enterprise-3.4 through 3.7 and openshift-enterprise-3.9 through 3.11. An attacker could use this flaw to steal authorization data by getting them to click on a malicious link." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.4", "versionEndIncluding" : "3.7" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.9", "versionEndIncluding" : "3.11" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-17T19:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3949", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms", "name" : "https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb3010_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.3_2762" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb3010:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb4000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.3_2762" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb4000:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb3500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.4_2773" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb3500:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb4500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.4_2773" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb4500:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb5000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.2_2824" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb5000:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T18:15Z", "lastModifiedDate" : "2019-07-11T16:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3950", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-798" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms", "name" : "https://kb.arlo.com/000062274/Security-Advisory-for-Networking-Misconfiguration-and-Insufficient-UART-Protection-Mechanisms", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb3010_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.3_2762" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb3010:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb4000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.3_2762" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb4000:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb3500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.4_2773" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb3500:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb4500_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.4_2773" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb4500:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:arlo:vmb5000_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.12.2.2_2824" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:arlo:vmb5000:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T18:15Z", "lastModifiedDate" : "2019-07-11T16:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3969", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tenable.com/security/research/tra-2019-34", "name" : "https://www.tenable.com/security/research/tra-2019-34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Local Privilege Escalation due to CmdAgent's handling of COM clients. A local process can bypass the signature check enforced by CmdAgent via process hollowing which can then allow the process to invoke sensitive COM methods in CmdAgent such as writing to the registry with SYSTEM privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3970", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tenable.com/security/research/tra-2019-34", "name" : "https://www.tenable.com/security/research/tra-2019-34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to Arbitrary File Write due to Cavwp.exe handling of Comodo's Antivirus database. Cavwp.exe loads Comodo antivirus definition database in unsecured global section objects, allowing a local low privileged process to modify this data directly and change virus signatures." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3971", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tenable.com/security/research/tra-2019-34", "name" : "https://www.tenable.com/security/research/tra-2019-34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Comodo Antivirus versions up to 12.0.0.6810 are vulnerable to a local Denial of Service affecting CmdVirth.exe via its LPC port \"cmdvrtLPCServerPort\". A low privileged local process can connect to this port and send an LPC_DATAGRAM, which triggers an Access Violation due to hardcoded NULLs used for Source parameter in a memcpy operation that is called for this handler. This results in CmdVirth.exe and its child svchost.exe instances to terminate." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3972", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tenable.com/security/research/tra-2019-34", "name" : "https://www.tenable.com/security/research/tra-2019-34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Comodo Antivirus versions 12.0.0.6810 and below are vulnerable to Denial of Service affecting CmdAgent.exe via an unprotected section object \"_CisSharedMemBuff\". This section object is exposed by CmdAgent and contains a SharedMemoryDictionary object, which allows a low privileged process to modify the object data causing CmdAgent.exe to crash." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-3973", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.tenable.com/security/research/tra-2019-34", "name" : "https://www.tenable.com/security/research/tra-2019-34", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Comodo Antivirus versions 11.0.0.6582 and below are vulnerable to Denial of Service affecting CmdGuard.sys via its filter port \"cmdServicePort\". A low privileged process can crash CmdVirth.exe to decrease the port's connection count followed by process hollowing a CmdVirth.exe instance with malicious code to obtain a handle to \"cmdServicePort\". Once this occurs, a specially crafted message can be sent to \"cmdServicePort\" using \"FilterSendMessage\" API. This can trigger an out-of-bounds write if lpOutBuffer parameter in FilterSendMessage API is near the end of specified buffer bounds. The crash occurs when the driver performs a memset operation which uses a size beyond the size of buffer specified, causing kernel crash." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4054", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "qradar_security_information_and_event_manager", "version" : { "version_data" : [ { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.2.8", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/156563", "name" : "ibm-qradar-cve20194054-info-disc (156563)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10957139", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10957139", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.2.0", "versionEndIncluding" : "7.2.8.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.3.0", "versionEndIncluding" : "7.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 3.3, "baseSeverity" : "LOW" }, "exploitabilityScore" : 1.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-17T19:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4118", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "multicloud_manager", "version" : { "version_data" : [ { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10885290", "name" : "http://www.ibm.com/support/docview.wss?uid=ibm10885290", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109147", "name" : "109147", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/158144", "name" : "ibm-mcm-cve20194118-info-disc (158144)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment. IBM X-Force ID: 158144." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:multicloud_manager:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:multicloud_manager:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:multicloud_manager:3.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 0.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-15T09:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4131", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "cloud_application_performance_management", "version" : { "version_data" : [ { "version_value" : "8.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/158270", "name" : "ibm-apm-cve20194131-dns (158270)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10957121", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10957121", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cloud_application_performance_management:8.1.4:*:*:*:*:advanced_private:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:cloud_application_performance_management:8.1.4:*:*:*:*:base_private:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-14T21:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "jazz_for_service_management", "version" : { "version_data" : [ { "version_value" : "1.1.3.1", "version_affected" : "=" }, { "version_value" : "1.1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10885985", "name" : "http://www.ibm.com/support/docview.wss?uid=ibm10885985", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/109144", "name" : "109144", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/159032", "name" : "ibm-jazz-cve20194193-info-disc (159032)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-force ID: 159032." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:jazz_for_service_management:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.1.3", "versionEndIncluding" : "1.1.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-15T08:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4194", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "jazz_for_service_management", "version" : { "version_data" : [ { "version_value" : "1.1.3.1", "version_affected" : "=" }, { "version_value" : "1.1.3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.ibm.com/support/docview.wss?uid=ibm10885989", "name" : "http://www.ibm.com/support/docview.wss?uid=ibm10885989", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/159033", "name" : "ibm-jazz-cve20194194-dos (159033)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:jazz_for_service_management:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.1.3.0", "versionEndIncluding" : "1.1.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "LOW", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-18T15:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4211", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "qradar_security_information_and_event_manager", "version" : { "version_data" : [ { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.2.2", "version_affected" : "=" }, { "version_value" : "7.2.3", "version_affected" : "=" }, { "version_value" : "7.2.4", "version_affected" : "=" }, { "version_value" : "7.2.5", "version_affected" : "=" }, { "version_value" : "7.2.6", "version_affected" : "=" }, { "version_value" : "7.2.7", "version_affected" : "=" }, { "version_value" : "7.2.8", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/159131", "name" : "ibm-qradar-cve20194211-xss (159131)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10957143", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10957143", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159131." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.2.0", "versionEndIncluding" : "7.2.8.15" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.3.0", "versionEndIncluding" : "7.3.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.3, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-17T19:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4263", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "content_navigator", "version" : { "version_data" : [ { "version_value" : "3.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/160015", "name" : "ibm-cn-cve20194263-info-disc (160015)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10882412", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10882412", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:continuous_delivery:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T20:15Z", "lastModifiedDate" : "2019-07-15T12:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-4430", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "maximo_asset_management", "version" : { "version_data" : [ { "version_value" : "7.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/162887", "name" : "ibm-maximo-cve20194430-info-disc (162887)", "refsource" : "XF", "tags" : [ "VDB Entry", "Vendor Advisory" ] }, { "url" : "https://www.ibm.com/support/docview.wss?uid=ibm10959173", "name" : "https://www.ibm.com/support/docview.wss?uid=ibm10959173", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162887." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-17T14:15Z", "lastModifiedDate" : "2019-07-18T15:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5220", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-275" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en", "name" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190626-01-frp-en", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker could do a certain operation on certain step of setup wizard. Successful exploit could allow the attacker bypass the FRP protection. Affected products: Mate 20 X, versions earlier than Ever-AL00B 9.0.0.200(C00E200R2P1); Mate 20, versions earlier than Hima-AL00B/Hima-TL00B 9.0.0.200(C00E200R2P1); Honor Magic 2, versions earlier than Tony-AL00B/Tony-TL00B 9.0.0.182(C00E180R2P2)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "ever-al00b_9.0.0.200\\(c00e200r2p1\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "hima-al00b\\/hima-tl00b_9.0.0.200\\(c00e200r2p1\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:honor_magic_2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "tony-al00b\\/tony-tl00b_9.0.0.182\\(c00e180r2p2\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:honor_magic_2:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "PHYSICAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 4.6, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 0.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T18:15Z", "lastModifiedDate" : "2019-07-18T18:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5221", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190703-01-share-en", "name" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190703-01-share-en", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "There is a path traversal vulnerability on Huawei Share. The software does not properly validate the path, an attacker could crafted a file path when transporting file through Huawei Share, successful exploit could allow the attacker to transport a file to arbitrary path on the phone. Affected products: Mate 20 X versions earlier than Ever-L29B 9.1.0.300(C432E3R1P12), versions earlier than Ever-L29B 9.1.0.300(C636E3R2P1), and versions earlier than Ever-L29B 9.1.0.300(C185E3R3P1)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "ever-l29b_9.1.0.300(c636e3r2p1)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "ever-l29b_9.1.0.300\\(c432e3r1p12\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "ever-l29b_9.1.0.300\\(c185e3r3p1\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 6.5, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T18:15Z", "lastModifiedDate" : "2019-07-18T18:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5222", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en", "name" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190717-01-input-en", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful exploit could result in information disclosure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T22:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5444", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "serve-here.js_project", "product" : { "product_data" : [ { "product_name" : "serve-here.js", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://hackerone.com/reports/569966", "name" : "https://hackerone.com/reports/569966", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Path traversal vulnerability in version up to v1.1.3 in serve-here.js npm module allows attackers to list any file in arbitrary folder." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:serve-here.js_project:serve-here.js:*:*:*:*:*:node.js:*:*", "versionEndIncluding" : "1.1.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-17T17:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5445", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7", "name" : "https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ui:edgeswitch_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.8.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:ep-s16.:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-12f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-16-150w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-16-xg:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-250w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-500w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-lite:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-500w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-750w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-lite:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-8-150w:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 4.9, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.2, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-17T17:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5446", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7", "name" : "https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:ui:edgeswitch_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "1.8.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:ep-s16.:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-12f:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-16-150w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-16-xg:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-250w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-500w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-24-lite:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-500w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-750w:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-48-lite:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:ui:es-8-150w:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.2, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.2, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-10T20:15Z", "lastModifiedDate" : "2019-07-17T17:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5447", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "http-file-server_project", "product" : { "product_data" : [ { "product_name" : "http-file-server", "version" : { "version_data" : [ { "version_value" : "0.2.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://hackerone.com/reports/570133", "name" : "https://hackerone.com/reports/570133", "refsource" : "MISC", "tags" : [ "Exploit", "Patch", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:http-file-server_project:http-file-server:*:*:*:*:*:node.js:*:*", "versionEndIncluding" : "0.2.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T18:15Z", "lastModifiedDate" : "2019-07-17T14:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5528", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "vmware", "product" : { "product_data" : [ { "product_name" : "esxi", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-749" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109130", "name" : "109130", "refsource" : "BID", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.vmware.com/security/advisories/VMSA-2019-0011.html", "name" : "https://www.vmware.com/security/advisories/VMSA-2019-0011.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:vmware:esxi:6.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "LOW", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T21:15Z", "lastModifiedDate" : "2019-07-18T18:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5599", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "12.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.html", "name" : "http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.html", "name" : "http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2019/06/17/5", "name" : "[oss-security] 20190617 Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md", "name" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md", "refsource" : "MISC", "tags" : [ "Mitigation", "Third Party Advisory" ] }, { "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193", "name" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/27", "name" : "20190624 FreeBSD Security Advisory FreeBSD-SA-19:08.rack", "refsource" : "BUGTRAQ", "tags" : [ "Mailing List", "Mitigation", "Patch", "Third Party Advisory" ] }, { "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.asc", "name" : "FreeBSD-SA-19:08", "refsource" : "FREEBSD", "tags" : [ "Mitigation", "Vendor Advisory" ] }, { "url" : "https://security.netapp.com/advisory/ntap-20190625-0004/", "name" : "https://security.netapp.com/advisory/ntap-20190625-0004/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://support.f5.com/csp/article/K75521003", "name" : "https://support.f5.com/csp/article/K75521003", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://www.kb.cert.org/vuls/id/905115", "name" : "VU#905115", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow unbounded and cause an expensive list traversal on every packet being processed, leading to resource exhaustion and a denial of service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-02T21:15Z", "lastModifiedDate" : "2019-07-15T17:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5600", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "11.2", "version_affected" : "=" }, { "version_value" : "11.3", "version_affected" : "=" }, { "version_value" : "12.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.html", "name" : "http://packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:09.iconv.asc", "name" : "FreeBSD-SA-19:09", "refsource" : "FREEBSD", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the implementation, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-15T17:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5601", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "11.2", "version_affected" : "=" }, { "version_value" : "12.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html", "name" : "http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:10.ufs.asc", "name" : "FreeBSD-SA-19:10", "refsource" : "FREEBSD", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-15T17:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5602", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "11.2", "version_affected" : "=" }, { "version_value" : "11.3", "version_affected" : "=" }, { "version_value" : "12.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html", "name" : "http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-19:11.cd_ioctl.asc", "name" : "FreeBSD-SA-19:11", "refsource" : "FREEBSD", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-15T18:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5629", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rapid7", "product" : { "product_data" : [ { "product_name" : "insight_agent", "version" : { "version_data" : [ { "version_value" : "2.6.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.com/files/153159/Rapid7-Windows-InsightIDR-Agent-2.6.3.14-Local-Privilege-Escalation.html", "name" : "http://packetstormsecurity.com/files/153159/Rapid7-Windows-InsightIDR-Agent-2.6.3.14-Local-Privilege-Escalation.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jun/13", "name" : "20190611 Rapid7's Windows InsightIDR Agent: Local Privilege Escalation", "refsource" : "FULLDISC", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "https://bogner.sh/2019/06/local-privilege-escalation-in-rapid7s-windows-insight-idr-agent/", "name" : "https://bogner.sh/2019/06/local-privilege-escalation-in-rapid7s-windows-insight-idr-agent/", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://help.rapid7.com/insightagent/release-notes/archive/2019/05/#20190529", "name" : "https://help.rapid7.com/insightagent/release-notes/archive/2019/05/#20190529", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/0", "name" : "20190603 Rapid7's Windows InsightIDR Agent: Local Privilege Escalation", "refsource" : "BUGTRAQ", "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python interpreter attempts to load python3.dll at \"C:\\DLLs\\python3.dll,\" which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent's startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 2.6.4." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.3" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-13T01:15Z", "lastModifiedDate" : "2019-07-18T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5680", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4835", "name" : "https://nvidia.custhelp.com/app/answers/detail/a_id/4835", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In NVIDIA Jetson TX1 L4T R32 version branch prior to R32.2, Tegra bootloader contains a vulnerability in nvtboot in which the nvtboot-cpu image is loaded without the load address first being validated, which may lead to code execution, denial of service, or escalation of privileges." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T20:15Z", "lastModifiedDate" : "2019-07-19T20:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5973", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sukimalab", "product" : { "product_data" : [ { "product_name" : "online_lesson_booking", "version" : { "version_data" : [ { "version_value" : "0.8.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jvn.jp/en/jp/JVN96988995/index.html", "name" : "https://jvn.jp/en/jp/JVN96988995/index.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://olbsys.com/fixed-vulnerability-issue/", "name" : "https://olbsys.com/fixed-vulnerability-issue/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://wordpress.org/plugins/online-lesson-booking-system/#developers", "name" : "https://wordpress.org/plugins/online-lesson-booking-system/#developers", "refsource" : "MISC", "tags" : [ "Product", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sukimalab:online_lesson_booking:*:*:*:*:*:wordpress:*:*", "versionEndIncluding" : "0.8.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-05T14:15Z", "lastModifiedDate" : "2019-07-15T15:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5974", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jvn.jp/en/jp/JVN80925867/index.html", "name" : "https://jvn.jp/en/jp/JVN80925867/index.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/contest-gallery/", "name" : "https://wordpress.org/plugins/contest-gallery/", "refsource" : "MISC", "tags" : [ "Product", "Third Party Advisory" ] }, { "url" : "https://wpvulndb.com/vulnerabilities/9436", "name" : "https://wpvulndb.com/vulnerabilities/9436", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:contest-gallery:contest_gallery:*:*:*:*:*:wordpress:*:*", "versionEndExcluding" : "10.4.5" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-05T14:15Z", "lastModifiedDate" : "2019-07-15T16:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5979", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "najeebmedia", "product" : { "product_data" : [ { "product_name" : "personalized_woocommerce_cart_page", "version" : { "version_data" : [ { "version_value" : "2.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jvn.jp/en/jp/JVN88804335/index.html", "name" : "https://jvn.jp/en/jp/JVN88804335/index.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/personalize-woocommerce-cart-page/", "name" : "https://wordpress.org/plugins/personalize-woocommerce-cart-page/", "refsource" : "MISC", "tags" : [ "Product", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in Personalized WooCommerce Cart Page 2.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:najeebmedia:personalized_woocommerce_cart_page:*:*:*:*:*:wordpress:*:*", "versionEndIncluding" : "2.4" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-05T14:15Z", "lastModifiedDate" : "2019-07-15T14:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-5980", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://jvn.jp/en/jp/JVN31406910/index.html", "name" : "https://jvn.jp/en/jp/JVN31406910/index.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://wordpress.org/plugins/related-youtube-videos/", "name" : "https://wordpress.org/plugins/related-youtube-videos/", "refsource" : "MISC", "tags" : [ "Product", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in Related YouTube Videos versions prior to 1.9.9 allows remote attackers to hijack the authentication of administrators via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:meomundo:related_youtube_videos:*:*:*:*:*:wordpress:*:*", "versionEndExcluding" : "1.9.9" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 2.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-05T14:15Z", "lastModifiedDate" : "2019-07-15T16:12Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6160", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.lenovo.com/solutions/LEN-25557", "name" : "https://support.lenovo.com/solutions/LEN-25557", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:px12-350r_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.0.24.34808" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:px12-350r:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:ix12-300r_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "4.0.24.34808" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:ix12-300r:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:home_media_network_hard_drive_firmware:*:*:*:*:cloud:*:*:*", "versionEndExcluding" : "3.2.16.30221" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:home_media_network_hard_drive:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:cloud:*:*:*", "versionEndExcluding" : "3.2.16.30221" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:storcenter_ix2-200:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:cloud:*:*:*", "versionEndExcluding" : "3.2.16.30221" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.1.50.30227" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:storcenter_ix-200:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.1.50.30227" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:lenovo:storcenter_ix4-200rl_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.1.50.30227" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:lenovo:storcenter_ix4-200rl:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T19:15Z", "lastModifiedDate" : "2019-07-18T15:58Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6632", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "big-ip_access_policy_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_advanced_firewall_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_analytics", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_application_acceleration_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_application_security_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_domain_name_system", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_edge_gateway", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_fraud_protection_service", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_global_traffic_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_link_controller", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_local_traffic_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_policy_enforcement_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_webaccelerator", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109112", "name" : "109112", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.f5.com/csp/article/K01413496", "name" : "https://support.f5.com/csp/article/K01413496", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomness. The attack prerequisite is direct access to encrypted configuration and/or UCS files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 1.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-11T15:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6634", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "big-ip_access_policy_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_advanced_firewall_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_analytics", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_application_acceleration_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_application_security_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_domain_name_system", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_edge_gateway", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_fraud_protection_service", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_global_traffic_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_link_controller", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_local_traffic_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_policy_enforcement_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_webaccelerator", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109104", "name" : "109104", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.f5.com/csp/article/K64855220", "name" : "https://support.f5.com/csp/article/K64855220", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any role." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6636", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "big-ip_advanced_firewall_manager", "version" : { "version_data" : [ { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } }, { "product_name" : "big-ip_application_security_manager", "version" : { "version_data" : [ { "version_value" : "12.0.0", "version_affected" : "=" }, { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109108", "name" : "109108", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.f5.com/csp/article/K68151373", "name" : "https://support.f5.com/csp/article/K68151373", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a stored cross-site scripting vulnerability in AFM feed list. In the worst case, an attacker can store a CSRF which results in code execution as the admin user. The level of user role which can perform this attack are resource administrator and administrator." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.0.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 8.4, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.7, "impactScore" : 6.0 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-11T16:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6637", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "f5", "product" : { "product_data" : [ { "product_name" : "big-ip_application_security_manager", "version" : { "version_data" : [ { "version_value" : "12.1.0", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" }, { "version_value" : "12.1.3", "version_affected" : "=" }, { "version_value" : "12.1.3.1", "version_affected" : "=" }, { "version_value" : "12.1.3.2", "version_affected" : "=" }, { "version_value" : "12.1.3.3", "version_affected" : "=" }, { "version_value" : "12.1.3.4", "version_affected" : "=" }, { "version_value" : "12.1.3.5", "version_affected" : "=" }, { "version_value" : "12.1.3.6", "version_affected" : "=" }, { "version_value" : "12.1.3.7", "version_affected" : "=" }, { "version_value" : "12.1.4", "version_affected" : "=" }, { "version_value" : "13.0.0", "version_affected" : "=" }, { "version_value" : "13.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0", "version_affected" : "=" }, { "version_value" : "13.1.0.0", "version_affected" : "=" }, { "version_value" : "13.1.0.1", "version_affected" : "=" }, { "version_value" : "13.1.0.2", "version_affected" : "=" }, { "version_value" : "13.1.0.3", "version_affected" : "=" }, { "version_value" : "13.1.0.4", "version_affected" : "=" }, { "version_value" : "13.1.0.5", "version_affected" : "=" }, { "version_value" : "13.1.0.6", "version_affected" : "=" }, { "version_value" : "13.1.0.7", "version_affected" : "=" }, { "version_value" : "13.1.0.8", "version_affected" : "=" }, { "version_value" : "13.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.1", "version_affected" : "=" }, { "version_value" : "13.1.1.3", "version_affected" : "=" }, { "version_value" : "13.1.1.4", "version_affected" : "=" }, { "version_value" : "14.0.0", "version_affected" : "=" }, { "version_value" : "14.0.0.2", "version_affected" : "=" }, { "version_value" : "14.0.0.4", "version_affected" : "=" }, { "version_value" : "14.1.0", "version_affected" : "=" }, { "version_value" : "14.1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109091", "name" : "109091", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://support.f5.com/csp/article/K29149494", "name" : "https://support.f5.com/csp/article/K29149494", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "On BIG-IP (ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results in the Linux kernel triggering OOM killer on arbitrary processes. The attack requires an authenticated user with role of \"Guest\" or greater privilege. Note: \"No Access\" cannot login so technically it's a role but a user with this access role cannot perform the attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "12.1.0", "versionEndExcluding" : "12.1.4.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0.0", "versionEndExcluding" : "13.1.1.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0.0", "versionEndExcluding" : "14.0.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.1.0", "versionEndExcluding" : "14.1.0.6" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-03T19:15Z", "lastModifiedDate" : "2019-07-11T14:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6822", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schneider-electric", "product" : { "product_data" : [ { "product_name" : "zelio_soft_2", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-416" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-01", "name" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-01", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:zelio_soft_2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.2" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-18T14:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6823", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schneider-electric", "product" : { "product_data" : [ { "product_name" : "proclima", "version" : { "version_data" : [ { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "name" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*", "versionEndExcluding" : "8.0.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-17T17:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6824", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schneider-electric", "product" : { "product_data" : [ { "product_name" : "proclima", "version" : { "version_data" : [ { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "name" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*", "versionEndExcluding" : "8.0.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-17T17:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6825", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schneider-electric", "product" : { "product_data" : [ { "product_name" : "proclima", "version" : { "version_data" : [ { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-427" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "name" : "https://www.schneider-electric.com/en/download/document/SEVD-2019-162-01/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:proclima:*:*:*:*:*:*:*:*", "versionEndExcluding" : "8.0.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-19T14:21Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-6827", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "schneider-electric", "product" : { "product_data" : [ { "product_name" : "interactive_graphical_scada_system", "version" : { "version_data" : [ { "version_value" : "12.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-787" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02", "name" : "https://www.schneider-electric.com/ww/en/download/document/SEVD-2019-190-02", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*", "versionEndIncluding" : "12.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "13.0", "versionEndExcluding" : "13.0.0.19140" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*", "versionStartIncluding" : "14.0", "versionEndExcluding" : "14.0.0.19120" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-15T21:15Z", "lastModifiedDate" : "2019-07-18T14:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7003", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "avaya", "product" : { "product_data" : [ { "product_name" : "control_manager", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "8.0.1.0", "version_affected" : "=" }, { "version_value" : "8.0.1.1", "version_affected" : "=" }, { "version_value" : "8.0.3.0", "version_affected" : "=" }, { "version_value" : "8.0.3.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/109134", "name" : "109134", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://downloads.avaya.com/css/P8/documents/101059368", "name" : "https://downloads.avaya.com/css/P8/documents/101059368", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://support.avaya.com/documents/documents-by-contenttype.action?product_id=P0941&product_name=Control+Manager&release_number=releaseId&contentType=ReleaseNotes", "name" : "https://support.avaya.com/documents/documents-by-contenttype.action?product_id=P0941&product_name=Control+Manager&release_number=releaseId&contentType=ReleaseNotes", "refsource" : "MISC", "tags" : [ "Release Notes", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A SQL injection vulnerability in the reporting component of Avaya Control Manager could allow an unauthenticated attacker to execute arbitrary SQL commands and retrieve sensitive data related to other users on the system. Affected versions of Avaya Control Manager include 7.x and 8.0.x versions prior to 8.0.4.0. Unsupported versions not listed here were not evaluated." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:avaya:control_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "7.0", "versionEndExcluding" : "8.0.4.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "CHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 10.0, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.8 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-19T13:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7590", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://gallery.technet.microsoft.com/scriptcenter/Windows-Unquoted-Service-190f0341", "name" : "https://gallery.technet.microsoft.com/scriptcenter/Windows-Unquoted-Service-190f0341", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.html", "name" : "https://packetstormsecurity.com/files/152128/exacqVision-9.8-Unquoted-Service-Path-Privilege-Escalation.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.johnsoncontrols.com/cyber-solutions/security-advisories", "name" : "https://www.johnsoncontrols.com/cyber-solutions/security-advisories", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://www.us-cert.gov/ics/advisories/icsa-19-199-01", "name" : "https://www.us-cert.gov/ics/advisories/icsa-19-199-01", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.php", "name" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5515.php", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ExacqVision Server?s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T21:15Z", "lastModifiedDate" : "2019-07-19T21:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7843", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7846", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper error handling vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7847", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference ('XXE') vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7848", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "campaign", "version" : { "version_data" : [ { "version_value" : "18.10.5.8984", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*", "versionEndIncluding" : "18.10.5.8984" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7850", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "campaign", "version" : { "version_data" : [ { "version_value" : "18.10.5.8984", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-77" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have a Command injection vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*", "versionEndIncluding" : "18.10.5.8984" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7941", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "campaign", "version" : { "version_data" : [ { "version_value" : "18.10.5.8984", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "name" : "https://helpx.adobe.com/security/products/campaign/apsb19-28.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*", "versionEndIncluding" : "18.10.5.8984" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7953", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "experience_manager", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.0.0", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.1.0", "version_affected" : "=" }, { "version_value" : "6.1.2.0", "version_affected" : "=" }, { "version_value" : "6.1.2.1", "version_affected" : "=" }, { "version_value" : "6.1.2.2", "version_affected" : "=" }, { "version_value" : "6.1.2.3", "version_affected" : "=" }, { "version_value" : "6.1.2.4", "version_affected" : "=" }, { "version_value" : "6.1.2.5", "version_affected" : "=" }, { "version_value" : "6.1.2.6", "version_affected" : "=" }, { "version_value" : "6.1.2.7", "version_affected" : "=" }, { "version_value" : "6.1.2.8", "version_affected" : "=" }, { "version_value" : "6.1.2.9", "version_affected" : "=" }, { "version_value" : "6.1.2.10", "version_affected" : "=" }, { "version_value" : "6.1.2.11", "version_affected" : "=" }, { "version_value" : "6.1.2.12", "version_affected" : "=" }, { "version_value" : "6.1.2.13", "version_affected" : "=" }, { "version_value" : "6.1.2.14", "version_affected" : "=" }, { "version_value" : "6.1.2.15", "version_affected" : "=" }, { "version_value" : "6.1.2.16", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.1.0", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.1.5", "version_affected" : "=" }, { "version_value" : "6.2.1.6", "version_affected" : "=" }, { "version_value" : "6.2.1.7", "version_affected" : "=" }, { "version_value" : "6.2.1.8", "version_affected" : "=" }, { "version_value" : "6.2.1.9", "version_affected" : "=" }, { "version_value" : "6.2.1.10", "version_affected" : "=" }, { "version_value" : "6.2.1.11", "version_affected" : "=" }, { "version_value" : "6.2.1.12.1", "version_affected" : "=" }, { "version_value" : "6.2.1.13", "version_affected" : "=" }, { "version_value" : "6.2.1.14", "version_affected" : "=" }, { "version_value" : "6.2.1.15", "version_affected" : "=" }, { "version_value" : "6.2.1.16", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.3.0.0", "version_affected" : "=" }, { "version_value" : "6.3.0.1", "version_affected" : "=" }, { "version_value" : "6.3.1.0", "version_affected" : "=" }, { "version_value" : "6.3.2.0", "version_affected" : "=" }, { "version_value" : "6.3.2.1", "version_affected" : "=" }, { "version_value" : "6.3.2.2", "version_affected" : "=" }, { "version_value" : "6.3.3.0", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "name" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.0", "versionEndIncluding" : "6.4" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7954", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "name" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Experience Manager version 6.4 and ealier have a Stored Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7955", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "experience_manager", "version" : { "version_data" : [ { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.2.0.0", "version_affected" : "=" }, { "version_value" : "6.2.0.1", "version_affected" : "=" }, { "version_value" : "6.2.1.0", "version_affected" : "=" }, { "version_value" : "6.2.1.1", "version_affected" : "=" }, { "version_value" : "6.2.1.2", "version_affected" : "=" }, { "version_value" : "6.2.1.3", "version_affected" : "=" }, { "version_value" : "6.2.1.4", "version_affected" : "=" }, { "version_value" : "6.2.1.5", "version_affected" : "=" }, { "version_value" : "6.2.1.6", "version_affected" : "=" }, { "version_value" : "6.2.1.7", "version_affected" : "=" }, { "version_value" : "6.2.1.8", "version_affected" : "=" }, { "version_value" : "6.2.1.9", "version_affected" : "=" }, { "version_value" : "6.2.1.10", "version_affected" : "=" }, { "version_value" : "6.2.1.11", "version_affected" : "=" }, { "version_value" : "6.2.1.12.1", "version_affected" : "=" }, { "version_value" : "6.2.1.13", "version_affected" : "=" }, { "version_value" : "6.2.1.14", "version_affected" : "=" }, { "version_value" : "6.2.1.15", "version_affected" : "=" }, { "version_value" : "6.2.1.16", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.3.0.0", "version_affected" : "=" }, { "version_value" : "6.3.0.1", "version_affected" : "=" }, { "version_value" : "6.3.1.0", "version_affected" : "=" }, { "version_value" : "6.3.2.0", "version_affected" : "=" }, { "version_value" : "6.3.2.1", "version_affected" : "=" }, { "version_value" : "6.3.2.2", "version_affected" : "=" }, { "version_value" : "6.3.3.0", "version_affected" : "=" }, { "version_value" : "6.4", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.4.0.0", "version_affected" : "=" }, { "version_value" : "6.4.1.0", "version_affected" : "=" }, { "version_value" : "6.4.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "name" : "https://helpx.adobe.com/security/products/experience-manager/apsb19-38.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Experience Manager version 6.4 and ealier have a Reflected Cross-site Scripting vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*", "versionStartIncluding" : "6.2", "versionEndIncluding" : "6.5" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "CHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.1, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 2.7 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:40Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7956", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "dreamweaver", "version" : { "version_data" : [ { "version_value" : "19.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-426" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb19-40.html", "name" : "https://helpx.adobe.com/security/products/dreamweaver/apsb19-40.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*", "versionEndIncluding" : "19.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T20:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-7963", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://helpx.adobe.com/security/products/bridge/apsb19-37.html", "name" : "https://helpx.adobe.com/security/products/bridge/apsb19-37.html", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Bridge CC version 9.0.2 and earlier versions have an out of bound read vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T22:15Z", "lastModifiedDate" : "2019-07-19T02:09Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8286", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719", "name" : "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#110719", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions up to 2019 could potentially disclose unique Product ID by forcing victim to visit a specially crafted webpage (for example, via clicking phishing link). Vulnerability has CVSS v3.0 base score 2.6" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T19:15Z", "lastModifiedDate" : "2019-07-18T19:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8458", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053", "name" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153053", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software Technologies signed binary, where under certain circumstances may cause the client to terminate." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:endpoint_security_clients:*:*:*:*:*:windows:*:*", "versionEndExcluding" : "e81.00" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:remote_access_clients:*:*:*:*:*:windows:*:*", "versionEndExcluding" : "e81.00" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:capsule_docs:*:*:*:*:*:*:*:*", "versionEndExcluding" : "e81.00" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "NETWORK", "attackComplexity" : "HIGH", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 4.4, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 0.7, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-06-20T17:15Z", "lastModifiedDate" : "2019-07-15T17:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8459", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "checkpoint", "product" : { "product_data" : [ { "product_name" : "smartconsole_for_endpoint_security_server", "version" : { "version_data" : [ { "version_value" : "e80.83", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-428" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved%20Issues", "name" : "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved%20Issues", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:jumbo_hotfix_for_endpoint_security_server:*:*:*:*:*:*:*:*", "versionEndExcluding" : "r77.30" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:endpoint_security_server_package:*:*:*:*:gaia:*:*:*", "versionEndExcluding" : "r77.30.03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:smartconsole_for_endpoint_security_server:e80.83:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:smartconsole_for_endpoint_security_server:*:*:*:*:*:*:*:*", "versionEndExcluding" : "r77.30.03" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:endpoint_security_clients:*:*:*:*:*:windows:*:*", "versionEndExcluding" : "e80.83" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:remote_access_clients:*:*:*:*:*:windows:*:*", "versionEndExcluding" : "e80.83" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:checkpoint:capsule_docs_standalone_client:*:*:*:*:*:*:*:*", "versionEndExcluding" : "e80.82" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-06-20T17:15Z", "lastModifiedDate" : "2019-07-19T16:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8931", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8932", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "name" : "https://support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T21:15Z", "lastModifiedDate" : "2019-07-18T12:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-8998", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "blackberry", "product" : { "product_data" : [ { "product_name" : "qnx_software_development_platform", "version" : { "version_data" : [ { "version_value" : "6.5.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000057178", "name" : "http://support.blackberry.com/kb/articleDetail?articleNumber=000057178", "refsource" : "MISC", "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.5.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-12T16:15Z", "lastModifiedDate" : "2019-07-16T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9147", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailvelope", "product" : { "product_data" : [ { "product_name" : "mailvelope", "version" : { "version_data" : [ { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.1.0", "version_affected" : "=" }, { "version_value" : "0.4.2.0", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.1.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.2.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.4.1", "version_affected" : "=" }, { "version_value" : "0.5.4.2", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.13.2", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v310", "name" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v310", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applications, the browser's extension isolation mechanisms are disabled (web_accessible_resources). Mailvelope implements additional measures to prevent web applications from directly embedding the settings page, but this mechanism can be bypassed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailvelope:mailvelope:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.1.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-11T16:03Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9148", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailvelope", "product" : { "product_data" : [ { "product_name" : "mailvelope", "version" : { "version_data" : [ { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.1.0", "version_affected" : "=" }, { "version_value" : "0.4.2.0", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.1.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.2.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.4.1", "version_affected" : "=" }, { "version_value" : "0.5.4.2", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.13.2", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-320" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "name" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key could claim to have signed a message that originates from another person." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailvelope:mailvelope:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "REQUIRED", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 4.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-11T16:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9149", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailvelope", "product" : { "product_data" : [ { "product_name" : "mailvelope", "version" : { "version_data" : [ { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.1.0", "version_affected" : "=" }, { "version_value" : "0.4.2.0", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.1.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.2.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.4.1", "version_affected" : "=" }, { "version_value" : "0.5.4.2", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.13.2", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-320" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "name" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker is able to sign (and encrypt) arbitrary messages with Mailvelope, assuming the private key password is cached. A second vulnerability allows an attacker to decrypt an arbitrary message when the GnuPG backend is used in Mailvelope." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailvelope:mailvelope:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "LOW", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 2.5 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-11T16:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9150", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mailvelope", "product" : { "product_data" : [ { "product_name" : "mailvelope", "version" : { "version_data" : [ { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.1.0", "version_affected" : "=" }, { "version_value" : "0.4.2.0", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.1.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.2.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.4.1", "version_affected" : "=" }, { "version_value" : "0.5.4.2", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.6.3", "version_affected" : "=" }, { "version_value" : "0.6.4", "version_affected" : "=" }, { "version_value" : "0.6.5", "version_affected" : "=" }, { "version_value" : "0.6.6", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "=" }, { "version_value" : "0.12.0", "version_affected" : "=" }, { "version_value" : "0.12.1", "version_affected" : "=" }, { "version_value" : "0.13.0", "version_affected" : "=" }, { "version_value" : "0.13.1", "version_affected" : "=" }, { "version_value" : "0.13.2", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.8.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-320" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "name" : "https://github.com/mailvelope/mailvelope/blob/master/Changelog.md#v330", "refsource" : "CONFIRM", "tags" : [ "Release Notes", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mailvelope:mailvelope:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.3.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "LOW", "availabilityImpact" : "NONE", "baseScore" : 5.3, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 3.9, "impactScore" : 1.4 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-09T21:15Z", "lastModifiedDate" : "2019-07-11T16:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9228", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "name" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A at least to 7.20A.252.062. The (1) management SSH and (2) management TELNET features allow remote attackers to cause a denial of service (connection slot exhaustion) via 5 unauthenticated connection attempts, because the maximum number of unauthenticated clients that can be configured is 5. NOTE: the vendor's position is that this is a \"design choice.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-19T23:15Z", "lastModifiedDate" : "2019-07-19T23:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9230", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "name" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the search function of the management web interface allows remote attackers to inject arbitrary web script or HTML via the keyword parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T15:15Z", "lastModifiedDate" : "2019-07-18T15:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9231", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "name" : "https://www.cirosec.de/fileadmin/1._Unternehmen/1.4._Unsere_Kompetenzen/Security_Advisory_AudioCodes_Mediant_family.pdf", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.307. A Cross-Site Request Forgery (CSRF) vulnerability in the management web interface allows remote attackers to execute malicious and unauthorized actions, because CSRFProtection=1 is not a default and is not documented." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-18T16:15Z", "lastModifiedDate" : "2019-07-18T18:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9629", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sonatype", "product" : { "product_data" : [ { "product_name" : "nexus_repository_manager", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.4-1", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.0-04", "version_affected" : "=" }, { "version_value" : "2.7.0-05", "version_affected" : "=" }, { "version_value" : "2.7.0-06", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "2.10", "version_affected" : "=" }, { "version_value" : "2.11", "version_affected" : "=" }, { "version_value" : "2.11.1", "version_affected" : "=" }, { "version_value" : "2.11.2", "version_affected" : "=" }, { "version_value" : "2.11.3", "version_affected" : "=" }, { "version_value" : "2.11.4", "version_affected" : "=" }, { "version_value" : "2.12", "version_affected" : "=" }, { "version_value" : "2.12.1", "version_affected" : "=" }, { "version_value" : "2.13", "version_affected" : "=" }, { "version_value" : "2.14", "version_affected" : "=" }, { "version_value" : "2.14.1", "version_affected" : "=" }, { "version_value" : "2.14.2", "version_affected" : "=" }, { "version_value" : "2.14.3", "version_affected" : "=" }, { "version_value" : "2.14.4", "version_affected" : "=" }, { "version_value" : "2.14.5", "version_affected" : "=" }, { "version_value" : "2.14.6", "version_affected" : "=" }, { "version_value" : "2.14.7", "version_affected" : "=" }, { "version_value" : "2.14.8", "version_affected" : "=" }, { "version_value" : "2.14.9", "version_affected" : "=" }, { "version_value" : "2.14.10", "version_affected" : "=" }, { "version_value" : "2.14.11", "version_affected" : "=" }, { "version_value" : "2.14.12", "version_affected" : "=" }, { "version_value" : "2.14.13", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.10.0", "version_affected" : "=" }, { "version_value" : "3.11.0", "version_affected" : "=" }, { "version_value" : "3.12.0", "version_affected" : "=" }, { "version_value" : "3.12.1", "version_affected" : "=" }, { "version_value" : "3.13.0", "version_affected" : "=" }, { "version_value" : "3.14.0", "version_affected" : "=" }, { "version_value" : "3.15.0", "version_affected" : "=" }, { "version_value" : "3.15.1", "version_affected" : "=" }, { "version_value" : "3.15.2", "version_affected" : "=" }, { "version_value" : "3.16.0", "version_affected" : "=" }, { "version_value" : "3.16.1", "version_affected" : "=" }, { "version_value" : "3.16.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.twistlock.com/labs-blog/vulnerabilities-nexus-repository-left-thousands-artifacts-exposed/", "name" : "https://www.twistlock.com/labs-blog/vulnerabilities-nexus-repository-left-thousands-artifacts-exposed/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.17.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 9.8, "baseSeverity" : "CRITICAL" }, "exploitabilityScore" : 3.9, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-08T19:15Z", "lastModifiedDate" : "2019-07-15T15:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9630", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sonatype", "product" : { "product_data" : [ { "product_name" : "nexus_repository_manager", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.4-1", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.7.0-04", "version_affected" : "=" }, { "version_value" : "2.7.0-05", "version_affected" : "=" }, { "version_value" : "2.7.0-06", "version_affected" : "=" }, { "version_value" : "2.7.1", "version_affected" : "=" }, { "version_value" : "2.7.2", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.8.1", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "=" }, { "version_value" : "2.9.2", "version_affected" : "=" }, { "version_value" : "2.10", "version_affected" : "=" }, { "version_value" : "2.11", "version_affected" : "=" }, { "version_value" : "2.11.1", "version_affected" : "=" }, { "version_value" : "2.11.2", "version_affected" : "=" }, { "version_value" : "2.11.3", "version_affected" : "=" }, { "version_value" : "2.11.4", "version_affected" : "=" }, { "version_value" : "2.12", "version_affected" : "=" }, { "version_value" : "2.12.1", "version_affected" : "=" }, { "version_value" : "2.13", "version_affected" : "=" }, { "version_value" : "2.14", "version_affected" : "=" }, { "version_value" : "2.14.1", "version_affected" : "=" }, { "version_value" : "2.14.2", "version_affected" : "=" }, { "version_value" : "2.14.3", "version_affected" : "=" }, { "version_value" : "2.14.4", "version_affected" : "=" }, { "version_value" : "2.14.5", "version_affected" : "=" }, { "version_value" : "2.14.6", "version_affected" : "=" }, { "version_value" : "2.14.7", "version_affected" : "=" }, { "version_value" : "2.14.8", "version_affected" : "=" }, { "version_value" : "2.14.9", "version_affected" : "=" }, { "version_value" : "2.14.10", "version_affected" : "=" }, { "version_value" : "2.14.11", "version_affected" : "=" }, { "version_value" : "2.14.12", "version_affected" : "=" }, { "version_value" : "2.14.13", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.3.0", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.4.0", "version_affected" : "=" }, { "version_value" : "3.5.0", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.6.2", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" }, { "version_value" : "3.7.1", "version_affected" : "=" }, { "version_value" : "3.8.0", "version_affected" : "=" }, { "version_value" : "3.9.0", "version_affected" : "=" }, { "version_value" : "3.10.0", "version_affected" : "=" }, { "version_value" : "3.11.0", "version_affected" : "=" }, { "version_value" : "3.12.0", "version_affected" : "=" }, { "version_value" : "3.12.1", "version_affected" : "=" }, { "version_value" : "3.13.0", "version_affected" : "=" }, { "version_value" : "3.14.0", "version_affected" : "=" }, { "version_value" : "3.15.0", "version_affected" : "=" }, { "version_value" : "3.15.1", "version_affected" : "=" }, { "version_value" : "3.15.2", "version_affected" : "=" }, { "version_value" : "3.16.0", "version_affected" : "=" }, { "version_value" : "3.16.1", "version_affected" : "=" }, { "version_value" : "3.16.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-275" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.twistlock.com/labs-blog/vulnerabilities-nexus-repository-left-thousands-artifacts-exposed/", "name" : "https://www.twistlock.com/labs-blog/vulnerabilities-nexus-repository-left-thousands-artifacts-exposed/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.17.0" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-08T19:15Z", "lastModifiedDate" : "2019-07-15T15:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9657", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alarm", "product" : { "product_data" : [ { "product_name" : "adc-v522ir_firmware", "version" : { "version_data" : [ { "version_value" : "0100b9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://www.vfxcomputing.com/?CVE-2019-9657", "name" : "https://www.vfxcomputing.com/?CVE-2019-9657", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates (used for initiating a VPN session to the Alarm.com infrastructure) on the local camera device." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:alarm:adc-v522ir_firmware:0100b9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:alarm:adc-v522ir:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector" : "LOCAL", "attackComplexity" : "LOW", "privilegesRequired" : "LOW", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 1.8, "impactScore" : 5.9 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-18T14:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9700", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "norton", "product" : { "product_data" : [ { "product_name" : "password_manager", "version" : { "version_data" : [ { "version_value" : "4.2.17", "version_affected" : "=" }, { "version_value" : "4.3.41", "version_affected" : "=" }, { "version_value" : "4.4.8", "version_affected" : "=" }, { "version_value" : "4.4.11", "version_affected" : "=" }, { "version_value" : "4.4.12", "version_affected" : "=" }, { "version_value" : "4.5.95", "version_affected" : "=" }, { "version_value" : "4.5.96", "version_affected" : "=" }, { "version_value" : "4.6.108", "version_affected" : "=" }, { "version_value" : "5.0.179", "version_affected" : "=" }, { "version_value" : "5.0.187", "version_affected" : "=" }, { "version_value" : "5.0.190", "version_affected" : "=" }, { "version_value" : "5.0.197", "version_affected" : "=" }, { "version_value" : "5.1.242", "version_affected" : "=" }, { "version_value" : "6.0.286", "version_affected" : "=" }, { "version_value" : "6.0.290", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.2", "version_affected" : "=" }, { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.298", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://support.symantec.com/us/en/article.SYMSA1483.html", "name" : "https://support.symantec.com/us/en/article.SYMSA1483.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the source of network traffic." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:norton:password_manager:*:*:*:*:*:iphone_os:*:*", "versionEndExcluding" : "6.2.309" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:norton:password_manager:*:*:*:*:*:android:*:*", "versionEndExcluding" : "6.3.0.2082" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attackVector" : "PHYSICAL", "attackComplexity" : "LOW", "privilegesRequired" : "HIGH", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "HIGH", "availabilityImpact" : "NONE", "baseScore" : 3.9, "baseSeverity" : "LOW" }, "exploitabilityScore" : 0.3, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 1.7 }, "severity" : "LOW", "exploitabilityScore" : 3.1, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-16T19:15Z", "lastModifiedDate" : "2019-07-18T16:23Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9848", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/", "name" : "FEDORA-2019-5561d20558", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/4063-1/", "name" : "USN-4063-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9848", "name" : "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9848", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLogo, a programmable turtle vector graphics script, which can be manipulated into executing arbitrary python commands. By using the document event feature to trigger LibreLogo to execute python contained within a document a malicious document could be constructed which would execute arbitrary python commands silently without warning. In the fixed versions, LibreLogo cannot be called from a document event handler. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T12:15Z", "lastModifiedDate" : "2019-07-17T13:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9849", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPTZJCNN52VNGSVC5DFKVW3EDMRDWKMP/", "name" : "FEDORA-2019-5561d20558", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://usn.ubuntu.com/4063-1/", "name" : "USN-4063-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849", "name" : "https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9849", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2019-07-17T12:15Z", "lastModifiedDate" : "2019-07-17T13:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2019-9886", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-284" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://surl.twcert.org.tw/aTxze", "name" : "http://surl.twcert.org.tw/aTxze", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://tvn.twcert.org.tw/taiwanvn/TVN-201906004", "name" : "https://tvn.twcert.org.tw/taiwanvn/TVN-201906004", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://zeroday.hitcon.org/vulnerability/ZD-2019-00423", "name" : "https://zeroday.hitcon.org/vulnerability/ZD-2019-00423", "refsource" : "CONFIRM", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:brainworksrnd:eclass_ip:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.5.10.2.1" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector" : "NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "HIGH", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.5, "baseSeverity" : "HIGH" }, "exploitabilityScore" : 3.9, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-07-11T19:15Z", "lastModifiedDate" : "2019-07-17T19:50Z" } ] }