Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3654 State: PUBLISHED Published: 2019-11-22T19:56:10 Last Updated: 2024-08-04T19:12:09.712Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: McAfee Products: Client Proxy (MCP) Problem Types: Authentication Bypass vulnerability Description: Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator. Additional Analyst Notes: - CVE Program Container: References: - https://k
ly be generated by the network administrator. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10305
CVE ID: CVE-2019-3660 State: PUBLISHED Published: 2019-11-13T23:05:53 Last Updated: 2024-08-04T19:12:09.655Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Improper Neutralization of HTTP requests Description: Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3661 State: PUBLISHED Published: 2019-11-13T23:40:52 Last Updated: 2024-08-04T19:12:09.667Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/ind
ime based payloads. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3662 State: PUBLISHED Published: 2019-11-13T23:45:53 Last Updated: 2024-08-04T19:12:09.656Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Path Traversal: '/absolute/pathname/here' vulnerability Description: Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3663 State: PUBLISHED Published: 2019-11-13T23:50:52 Last Updated: 2024-08-04T19:12:09.599Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Unprotected Storage of Credentials vulnerability Description: Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances o
further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3665 State: PUBLISHED Published: 2019-12-03T10:55:26 Last Updated: 2024-08-04T19:12:09.722Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: McAfee, LLC Products: McAfee Web Advisor (WA) Problem Types: Code Injection vulnerability Description: Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS102991
CVE ID: CVE-2019-3666 State: PUBLISHED Published: 2019-12-03T10:55:16 Last Updated: 2024-08-04T19:12:09.602Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: McAfee, LLC Products: McAfee Web Advisor (WA) Problem Types: API Abuse/Misuse vulnerability Description: API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS102991
CVE ID: CVE-2019-3667 State: PUBLISHED Published: 2019-12-11T06:25:17 Last Updated: 2024-08-04T19:12:09.661Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: McAfee, LLC Products: McAfee TechCheck Problem Types: DLL Search Order Hijacking vulnerability Description: DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102996
CVE ID: CVE-2019-3670 State: PUBLISHED Published: 2020-02-24T10:10:17 Last Updated: 2024-08-04T19:12:09.666Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: McAfee, LLC Products: Web Advisor (WA) Problem Types: Remote Code Execution vulnerability Description: Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS103008
CVE ID: CVE-2019-3681 State: PUBLISHED Published: 2020-06-29T12:00:16.969947Z Last Updated: 2024-09-17T03:28:54.416Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4, openSUSE Leap 15.1, openSUSE Factory Problem Types: CWE-73 Description: A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Lea
SE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 . Additional Analyst Notes: - CVE Program Container: Refer
-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 . Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1122675
CVE ID: CVE-2019-3682 State: PUBLISHED Published: 2020-01-17T08:30:14.173118Z Last Updated: 2024-09-17T00:21:42.516Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: SUSE CaaS Platform 3.0 Problem Types: CWE-668 Description: The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1121148
CVE ID: CVE-2019-3683 State: PUBLISHED Published: 2020-01-17T11:10:12.100176Z Last Updated: 2024-09-17T02:53:23.354Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: SUSE Openstack Cloud 8 Problem Types: CWE-732 Description: The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete arbitrary resources, contrary to expectations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.su
esources, contrary to expectations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1124864
CVE ID: CVE-2019-3684 State: PUBLISHED Published: 2019-05-13T14:17:09.831416Z Last Updated: 2024-09-17T00:10:47.358Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE, Uyuni Products: SUSE Manager, Uyuni Problem Types: CWE-922 Description: SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1131954
CVE ID: CVE-2019-3685 State: PUBLISHED Published: 2019-11-05T09:30:41.212206Z Last Updated: 2024-09-16T16:49:06.631Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Open Build Service Products: Open Build Service Problem Types: CWE-295 Description: Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1142518
CVE ID: CVE-2019-3686 State: PUBLISHED Published: 2020-01-17T12:40:12.889520Z Last Updated: 2024-09-17T03:38:40.014Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: SUSE Products: openQA Problem Types: CWE-79 Description: openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1142849
CVE ID: CVE-2019-3687 State: PUBLISHED Published: 2020-01-24T08:25:14.454947Z Last Updated: 2024-09-16T20:16:49.597Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SUSE Products: SUSE Linux Enterprise Server Problem Types: CWE-276 Description: The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119aa. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug
4bc21c80c66276119aa. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1148788 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00010.html
CVE ID: CVE-2019-3688 State: PUBLISHED Published: 2019-10-07T14:00:39.441891Z Last Updated: 2024-09-16T23:01:09.236Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SUSE Products: SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 12 Problem Types: CWE-276 Description: The /usr/sbin/pinger binary packaged with squid in SUSE Linux Enterprise Server 15 before and including version 4.8-5.8.1 and in SUSE Linux Enterprise Server 12 before and including 3.5.21-26.17.1 had squid:root, 0750 permissions. This allowed an attacker that compromissed the squid user to gain persistence by changing the binary Additional Analyst Notes: - CVE Program Container: Re
romissed the squid user to gain persistence by changing the binary Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1093414 - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00053.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00056.html - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html
CVE ID: CVE-2019-3689 State: PUBLISHED Published: 2019-09-19T13:27:58.449735Z Last Updated: 2024-09-17T04:14:20.947Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SUSE Products: SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 Problem Types: CWE-276 Description: The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into c
owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1150733 - https://lists.debian.org/debian-lts-announce/2019/10/msg00026.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00006.html - https://git.linux-nfs.org/?p=steved/nfs-utils.git%3Ba=commitdiff%3Bh=fee2cc29e888f2ced6a76990923aef19d326dc0e - https://usn.ubuntu.com/4400-1/
CVE ID: CVE-2019-3690 State: PUBLISHED Published: 2019-12-05T15:30:15.557339Z Last Updated: 2024-09-16T16:38:49.600Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: SUSE Products: permissions Problem Types: CWE-59 Description: The chkstat tool in the permissions package followed symlinks before commit a9e1d26cd49ef9ee0c2060c859321128a6dd4230 (please also check the additional hardenings after this fix). This allowed local attackers with control over a path that is traversed by chkstat to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html - https://bug
rogram Container: References: - http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00024.html - https://bugzilla.suse.com/show_bug.cgi?id=1150734
CVE ID: CVE-2019-3691 State: PUBLISHED Published: 2020-01-23T16:00:20.042692Z Last Updated: 2024-09-16T22:15:11.514Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 15, Factory Problem Types: CWE-59 Description: A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1. Additional Analyst Notes: - CVE Program Container: Referen
3-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1155075
CVE ID: CVE-2019-3692 State: PUBLISHED Published: 2020-01-24T08:50:12.217219Z Last Updated: 2024-09-16T20:51:57.334Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 11, Factory, Leap 15.1 Problem Types: CWE-59 Description: The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions.
E Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00027.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00028.html - https://bugzilla.suse.com/show_bug.cgi?id=1154302
CVE ID: CVE-2019-3693 State: PUBLISHED Published: 2020-01-24T10:05:17.025101Z Last Updated: 2024-09-17T02:46:37.656Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12, Leap 15.1 Problem Types: CWE-59 Description: A symlink following vulnerability in the packaging of mailman in SUSE Linux Enterprise Server 11, SUSE Linux Enterprise Server 12; openSUSE Leap 15.1 allowed local attackers to escalate their privileges from user wwwrun to root. Additionally arbitrary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior
rary files could be changed to group mailman. This issue affects: SUSE Linux Enterprise Server 11 mailman versions prior to 2.1.15-9.6.15.1. SUSE Linux Enterprise Server 12 mailman versions prior to 2.1.17-3.11.1. openSUSE Leap 15.1 mailman version 2.1.29-lp151.2.14 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00059.html - http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00000.html - https://bugzilla.suse.com/show_bug.cgi?id=1154328
CVE ID: CVE-2019-3694 State: PUBLISHED Published: 2020-01-24T10:50:11.606027Z Last Updated: 2024-09-17T00:26:07.628Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: openSUSE Products: Factory, Leap 15.1 Problem Types: CWE-59 Description: A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1155
ersions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1155078
CVE ID: CVE-2019-3695 State: PUBLISHED Published: 2020-03-03T11:05:18.069478Z Last Updated: 2024-09-16T18:03:10.964Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Developme
prise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, openSUSE Leap 15.1 Problem Types: CWE-94 Description: A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit
Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Mo
1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?i
1-lp151.2.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1152763
CVE ID: CVE-2019-3696 State: PUBLISHED Published: 2020-03-03T11:05:18.714867Z Last Updated: 2024-09-16T22:20:22.200Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Developme
prise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5, openSUSE Leap 15.1 Problem Types: CWE-22 Description: A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Sof