Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-1747
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
Affected Products: PyYAML
References: [{'name': 'FEDORA-2020-40c35d7b37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WORRFHPQVAFKKXXWLSSW6XKUYLWM6CSH/'}, {'name': 'FEDORA-2020-bdb0bfa928', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJA3SGNJKCAYPSHOHWY3KBCWNM5NYK2/'}, {'name': 'FEDORA-2020-e9741a6a15', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5HEPD7LEVDPCITY5IMDYWXUMX37VFMY/'}, {'name': 'openSUSE-SU-2020:0507', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00017.html'}, {'name': 'openSUSE-SU-2020:0630', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00017.html'}, {'name': 'FEDORA-2021-3342569a0f', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MMQXSZXNJT6ERABJZAAICI3DQSQLCP3D/'}, {'name': 'FEDORA-2021-eed7193502', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7PPAS6C4SZRDQLR7C22A5U3QOLXY33JX/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1747'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yaml/pyyaml/pull/386'}]
CVE State: PUBLISHED
Explain CVE-2020-1748
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources.
Affected Products: Wildfly
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1807707'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201001-0005/'}]
CVE State: PUBLISHED
Explain CVE-2020-1749
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Affected Products: kernel
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20201222-0001/'}]
CVE State: PUBLISHED
Explain CVE-2020-1750
A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster. This was fixed in openshift/machine-config-operator 4.4.3, openshift/machine-config-operator 4.3.25, openshift/machine-config-operator 4.2.36.
Affected Products: machine-config-operator-container
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1808130'}]
CVE State: PUBLISHED
Explain CVE-2020-1751
An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.
Affected Products: glibc
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751'}, {'tags': ['x_refsource_MISC'], 'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=25423'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20200430-0002/'}, {'name': 'GLSA-202006-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-04'}, {'name': 'USN-4416-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4416-1/'}]
CVE State: PUBLISHED
Explain CVE-2020-1752
A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.
Affected Products: glibc
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1752'}, {'url': 'https://sourceware.org/bugzilla/show_bug.cgi?id=25414'}, {'url': 'https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ddc650e9b3dc916eab417ce9f79e67337b05035c'}, {'url': 'https://security.netapp.com/advisory/ntap-20200511-0005/'}, {'name': 'USN-4416-1', 'tags': ['vendor-advisory'], 'url': 'https://usn.ubuntu.com/4416-1/'}, {'name': 'GLSA-202101-20', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202101-20'}, {'name': '[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': ['mailing-list'], 'url': 'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E'}, {'name': '[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': ['mailing-list'], 'url': 'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E'}, {'name': '[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1753
A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versions prior to 2.9.7, when managing kubernetes using the k8s module. Sensitive parameters such as passwords and tokens are passed to kubectl from the command line, not using an environment variable or an input configuration file. This will disclose passwords and tokens from process list and no_log directive from debug module would not have any effect making these secrets being disclosed on stdout and log files.
Affected Products: Ansible
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1753'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ansible-collections/kubernetes/pull/51'}, {'name': 'FEDORA-2020-1b6ce91e37', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQVOQD4VAIXXTVQAJKTN7NUGTJFE2PCB/'}, {'name': 'FEDORA-2020-3990f03ba3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKPA4KC3OJSUFASUYMG66HKJE7ADNGFW/'}, {'name': 'FEDORA-2020-f80154b5b4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRRYUU5ZBLPBXCYG6CFP35D64NP2UB2S/'}, {'name': 'GLSA-202006-11', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202006-11'}, {'name': 'DSA-4950', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4950'}]
CVE State: PUBLISHED
Explain CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.
Affected Products: Moodle
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398350'}]
CVE State: PUBLISHED
Explain CVE-2020-1755
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
Affected Products: Moodle
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398351'}]
CVE State: PUBLISHED
Explain CVE-2020-1756
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
Affected Products: Moodle
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=398352'}]
CVE State: PUBLISHED
Explain CVE-2020-1757
A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.
Affected Products: undertow
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757'}]
CVE State: PUBLISHED
Explain CVE-2020-1758
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
Affected Products: keycloak
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1758'}, {'tags': ['x_refsource_MISC'], 'url': 'https://issues.redhat.com/browse/KEYCLOAK-13285'}]
CVE State: PUBLISHED
Explain CVE-2020-1759
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
Affected Products: ceph
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759'}, {'name': 'FEDORA-2020-81b9c6cddc', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/'}, {'name': 'GLSA-202105-39', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202105-39'}]
CVE State: PUBLISHED
Explain CVE-2020-1760
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks due to the lack of proper neutralization of untrusted input.
Affected Products: ceph
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1760'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2020/04/07/1'}, {'name': 'FEDORA-2020-81b9c6cddc', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE/'}, {'name': 'USN-4528-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/4528-1/'}, {'name': 'GLSA-202105-39', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202105-39'}, {'name': '[debian-lts-announce] 20210810 [SECURITY] [DLA 2735-1] ceph security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1761
A flaw was found in the OpenShift web console, where the access token is stored in the browser's local storage. An attacker can use this flaw to get the access token via physical access, or an XSS attack on the victim's browser. This flaw affects openshift/console versions before openshift/console-4.
Affected Products: openshift/console
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1813788'}]
CVE State: PUBLISHED
Explain CVE-2020-1762
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.
Affected Products: kiali
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://kiali.io/news/security-bulletins/kiali-security-001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762'}]
CVE State: PUBLISHED
Explain CVE-2020-1763
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending specially-crafted IKEv1 Informational Exchange packets. The daemon respawns after the crash.
Affected Products: libreswan
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1763'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1813329'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libreswan/libreswan/commit/471a3e41a449d7c753bc4edbba4239501bb62ba8'}, {'name': 'DSA-4684', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2020/dsa-4684'}, {'name': 'GLSA-202007-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202007-21'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-379803.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-040-04'}]
CVE State: PUBLISHED
Explain CVE-2020-1764
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.
Affected Products: kiali
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://kiali.io/news/security-bulletins/kiali-security-001/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764'}]
CVE State: PUBLISHED
Explain CVE-2020-1765
An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and AgentTicketEmailOutbound. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-01/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1766
Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted SVG file rendered as inline jpg file. This issue affects: ((OTRS)) Community Edition 5.0.x version 5.0.39 and prior versions; 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-02/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1767
Agent A is able to save a draft (i.e. for customer reply). Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: ((OTRS)) Community Edition 6.0.x version 6.0.24 and prior versions. OTRS 7.0.x version 7.0.13 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-03/'}, {'name': '[debian-lts-announce] 20200129 [SECURITY] [DLA 2079-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/01/msg00027.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1768
The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
Affected Products: OTRS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-04/'}]
CVE State: PUBLISHED
Explain CVE-2020-1769
In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-06/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1770
Support bundle generated files could contain sensitive information that might be unwanted to be disclosed. This issue affects: ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-07/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1771
Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript). When agent opens the link, JavaScript code is executed due to the missing parameter encoding. This issue affects: ((OTRS)) Community Edition: 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-08/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1772
It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-09/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1773
An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, password reset tokens and automatically generated passwords. This issue affects ((OTRS)) Community Edition: 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS; 7.0.15 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-10/'}, {'name': 'openSUSE-SU-2020:0551', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00038.html'}, {'name': 'openSUSE-SU-2020:1475', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00066.html'}, {'name': 'openSUSE-SU-2020:1509', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00077.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1774
When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects ((OTRS)) Community Edition: 5.0.42 and prior versions, 6.0.27 and prior versions. OTRS: 7.0.16 and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-11/'}, {'name': '[debian-lts-announce] 20200501 [SECURITY] [DLA 2198-1] otrs2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2020/05/msg00000.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1775
BCC recipients in mails sent from OTRS are visible in article detail on external interface. This issue affects OTRS: 8.0.3 and prior versions, 7.0.17 and prior versions.
Affected Products: OTRS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-12/'}]
CVE State: PUBLISHED
Explain CVE-2020-1776
When an agent user is renamed or set to invalid the session belonging to the user is keept active. The session can not be used to access ticket data in the case the agent is invalid. This issue affects ((OTRS)) Community Edition: 6.0.28 and prior versions. OTRS: 7.0.18 and prior versions, 8.0.4. and prior versions.
Affected Products: ((OTRS)) Community Edition
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-13/'}]
CVE State: PUBLISHED
Explain CVE-2020-1777
Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.
Affected Products: OTRS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-15/'}]
CVE State: PUBLISHED
Explain CVE-2020-1778
When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions.
Affected Products: OTRS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-16/'}]
CVE State: PUBLISHED
Explain CVE-2020-1779
When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions.
Affected Products:  OTRSTicketForms
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://otrs.com/release-notes/otrs-security-advisory-2020-17/'}]
CVE State: PUBLISHED
Explain CVE-2020-1785
Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should trick the user into installing a malicious application, successful exploit could cause reboot of the smartphone.
Affected Products: Mate 10 Pro;Honor V10;Honor 10;Nova 4
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-03-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1786
HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a special condition which could allow an attacker to forge a crafted application as a normal one. Successful exploit could allow the attacker to bypass digital balance function.
Affected Products: HUAWEI Mate 20 Pro
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1787
HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an instant, without unlocking the screen lock of the host user.
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1788
Honor V30 smartphones with versions earlier than 10.0.1.135(C00E130R4P1) have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious application. Successful exploit could allow unauthorized actions leading to information disclosure.
Affected Products: Honor V30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1789
Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.
Affected Products: OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200121-01-osca-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1790
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.
Affected Products: GaussDB 200
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-gauss-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1791
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode.
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1792
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.
Affected Products: Honor V10
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200226-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1793
There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Affected Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1794
There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Affected Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1795
There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Affected Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1796
There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2).
Affected Products: HUAWEI Mate 20;HUAWEI Mate 30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1797
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function.
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-03-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1798
HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. A logic error occurs when handling NFC work, an attacker should establish a NFC connection to the target phone, and then do a series of operations on the target phone. Successful exploit could allow a guest user do certain operation which is beyond the guest user's privilege.
Affected Products: HUAWEI P30
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1799
E6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233) has a use after free vulnerability. The software references memory after it has been freed in certain scenario, the attacker does a series of crafted operations through web portal, successful exploit could cause a use after free condition which may lead to malicious code execution.
Affected Products: E6878-370
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200520-01-uaf-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1800
HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor, the attacker tricks the user into installing a crafted application, successful exploit could allow the attacker do certain unauthenticated operations.
Affected Products: HUAWEI P30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1801
There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2).
Affected Products: Mate 30 Pro;Mate 30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1802
There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently validate the integrity of certain file in certain loading processes, successful exploit could allow the attacker to load a crafted file to the device through USB.Affected product versions include:OSCA-550 versions 1.0.1.23(SP2);OSCA-550A versions 1.0.1.23(SP2);OSCA-550AX versions 1.0.1.23(SP2);OSCA-550X versions 1.0.1.23(SP2).
Affected Products: OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-osca-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1803
Huawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier than 10.0.0.180(C185E3R3P3),versions earlier than 10.0.0.180(C432E10R3P4) have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, successful exploit could cause information disclosure.
Affected Products: Honor V20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-smartphone-en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1804
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.
Affected Products: Honor V10
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1805
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 2 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1806.
Affected Products: Honor V10
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1806
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 3 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1805.
Affected Products: Honor V10
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1807
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series of operation in ADB mode.
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1808
Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.
Affected Products: Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1809
HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone leading to information disclosure.
Affected Products: HUAWEI Mate 10
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1810
There is a weak algorithm vulnerability in some Huawei products. The affected products use the RSA algorithm in the SSL key exchange algorithm which have been considered as a weak algorithm. Attackers may exploit this vulnerability to leak some information.
Affected Products: CloudEngine 12800;S5700;S6700
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-rsa-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1811
GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.
Affected Products: GaussDB 200
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200120-01-gaussdb200-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1812
HUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.
Affected Products: HUAWEI P30
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200120-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1813
HUAWEI P30 smart phone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the attacker to perform unauthorized operations.
Affected Products: HUAWEI P30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-04-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1814
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability. An authenticated attacker may do some special operations in the affected products in some special scenarios to exploit the vulnerability. Due to improper race conditions of different operations, successful exploit will lead to Dangling pointer dereference, causing some service abnormal.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-01-firewall-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1815
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while parse certain message, the attacker sends the message continuously that could consume remaining memory. Successful exploit could cause memory exhaust.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-02-firewall-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1816
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attackers can send constructed IPSEC packets to affected devices to exploit this vulnerability. Successful exploit could cause the IPSec function of the affected device abnormal.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-firewall-en'}]
CVE State: PUBLISHED