Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-28797 State: PUBLISHED Published: 2024-06-30T18:03:50.828Z Last Updated: 2024-08-02T00:56:58.104Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 287136. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pag
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/287136
CVE ID: CVE-2024-28798 State: PUBLISHED Published: 2024-06-30T16:12:59.807Z Last Updated: 2024-08-02T00:56:58.149Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: InfoSphere Information Server Problem Types: CWE-79 Description: IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 287172. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages
itional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/287172
CVE ID: CVE-2024-28799 State: PUBLISHED Published: 2024-08-14T15:41:30.579Z Last Updated: 2024-09-21T09:56:29.274Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-214 Description: IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 displays sensitive data improperly to a local privileged user, in non default configurations, during back-end commands which may result in the unexpected disclosure of this information. IBM X-Force ID: 287173. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/
formation. IBM X-Force ID: 287173. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7165488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/287173
CVE ID: CVE-2024-28803 State: PUBLISHED Published: 2025-03-13T00:00:00.000Z Last Updated: 2025-03-19T18:46:38.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameter Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2024-28804 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-08-02T00:56:58.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS) can occur via POST. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2024-28805 State: PUBLISHED Published: 2024-07-29T00:00:00.000Z Last Updated: 2025-03-14T16:01:02.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2024-28806 State: PUBLISHED Published: 2024-07-29T00:00:00 Last Updated: 2024-08-05T10:22:56.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2024-28807 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T20:57:45.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop management application allows guest OS administrators to obtain various users' passwords by accessing memory dumps of the desktop application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28807
CVE ID: CVE-2024-28808 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-11-06T19:52:10.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to access reserved information by accessing undocumented web applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28808
CVE ID: CVE-2024-28809 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T20:55:59.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809
CVE ID: CVE-2024-28810 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T20:54:31.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic files (exported by the @CT application) allows an attacker to achieve loss of confidentiality by analyzing these files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28810
CVE ID: CVE-2024-28811 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-11-25T20:54:07.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications contained in a specific OS directory via HTTP invocations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28811
CVE ID: CVE-2024-28812 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T18:39:04.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812
CVE ID: CVE-2024-28813 State: PUBLISHED Published: 2024-09-30T00:00:00 Last Updated: 2024-09-30T18:46:32.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activate remote SSH access to the appliance via an unexpected network interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28813
CVE ID: CVE-2024-28815 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-08-02T00:56:58.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or execution of arbitrary commands within the context of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003 - https://www.mitel.com/-/media/mitel/fil
.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0003 - https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0003-001-v1.pdf - https://cwe.mitre.org/data/definitions/1188.html
CVE ID: CVE-2024-28816 State: PUBLISHED Published: 2024-03-11T00:00:00.000Z Last Updated: 2025-03-27T16:46:02.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/AaravRajSIngh/Chatbot/pull/10
CVE ID: CVE-2024-28818 State: PUBLISHED Published: 2024-06-05T00:00:00.000Z Last Updated: 2025-03-17T17:44:27.518Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check states specified by the RRC (Radio Resource Control) module. This can lead to disclosure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
) module. This can lead to disclosure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2024-28820 State: PUBLISHED Published: 2024-06-27T00:00:00 Last Updated: 2024-11-04T17:54:47.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the extract_openvpn_cr function in openvpn-cr.c in openvpn-auth-ldap (aka the Three Rings Auth-LDAP plugin for OpenVPN) 2.0.4 allows attackers with a valid LDAP username and who can control the challenge/response password field to pass a string with more than 14 colons into this field and cause a buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/threerings/openvpn-auth-ldap/tags - https://github.com/threerings/openvpn-auth-ldap/pull
eferences: - https://github.com/threerings/openvpn-auth-ldap/tags - https://github.com/threerings/openvpn-auth-ldap/pull/92
CVE ID: CVE-2024-28823 State: PUBLISHED Published: 2024-03-11T00:00:00 Last Updated: 2024-11-01T18:55:09.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon AWS aws-js-s3-explorer (aka AWS JavaScript S3 Explorer) 1.0.0 allows XSS via a crafted S3 bucket name to index.html. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/awslabs/aws-js-s3-explorer/issues/118 - https://github.com/awslabs/aws-js-s3-explorer/commit/f62f12960d081895960d0dc6fde8364f25d651b6
CVE ID: CVE-2024-28824 State: PUBLISHED Published: 2024-03-22T10:26:35.280Z Last Updated: 2024-08-02T00:56:58.156Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-272, CWE-807 Description: Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/16198
CVE ID: CVE-2024-28825 State: PUBLISHED Published: 2024-04-24T11:25:36.306Z Last Updated: 2024-08-02T00:56:58.650Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-307 Description: Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 (beta), 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 (EOL) facilitates password brute-forcing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/15198
CVE ID: CVE-2024-28826 State: PUBLISHED Published: 2024-05-29T10:00:53.789Z Last Updated: 2024-08-02T00:56:58.127Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-73 Description: Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/15200
CVE ID: CVE-2024-28827 State: PUBLISHED Published: 2024-07-10T12:41:04.948Z Last Updated: 2024-08-02T00:56:58.208Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-732 Description: Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/16845
CVE ID: CVE-2024-28828 State: PUBLISHED Published: 2024-07-10T12:41:13.934Z Last Updated: 2024-08-02T00:56:58.057Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-352 Description: Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/17090
CVE ID: CVE-2024-28829 State: PUBLISHED Published: 2024-08-20T09:29:26.474Z Last Updated: 2024-08-21T19:37:32.708Z Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-272, CWE-807 Description: Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/16249
CVE ID: CVE-2024-28830 State: PUBLISHED Published: 2024-06-26T07:56:57.020Z Last Updated: 2024-08-02T00:56:58.058Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p7, <2.2.0p28, <2.1.0p45 and <=2.0.0p39 (EOL) causes automation user secrets to be written to audit log files accessible to administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/17056
CVE ID: CVE-2024-28831 State: PUBLISHED Published: 2024-06-25T11:45:27.259Z Last Updated: 2024-08-02T00:56:58.164Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-80 Description: Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute arbitrary scripts by injecting HTML elements into some user input fields that are shown in a confirmation pop-up. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/17025
CVE ID: CVE-2024-28832 State: PUBLISHED Published: 2024-06-25T11:45:33.371Z Last Updated: 2024-08-02T00:56:58.120Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-80 Description: Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users with permission to change Global Settings to execute arbitrary scripts by injecting HTML elements into the Crash Report URL in the Global Settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/17024
CVE ID: CVE-2024-28833 State: PUBLISHED Published: 2024-06-10T11:55:50.571Z Last Updated: 2024-08-02T00:56:58.393Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-307 Description: Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://checkmk.com/werk/16830
CVE ID: CVE-2024-28834 State: PUBLISHED Published: 2024-03-21T13:29:11.532Z Last Updated: 2025-11-06T22:40:13.367Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 Problem Types: CWE-327 Description: A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leadin
The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1784 - https://access.redhat.com/errata/RHSA-2024:1879 - https://access.redhat.com/errata/RHSA-2024:1997 - https://access.redhat.com/errata/RHSA-2024:2044 - https://access.redhat.com/errata/RHSA-2024:2570 - https://access.re
- https://access.redhat.com/errata/RHSA-2024:2044 - https://access.redhat.com/errata/RHSA-2024:2570 - https://access.redhat.com/errata/RHSA-2024:2889 - https://access.redhat.com/security/cve/CVE-2024-28834 - https://bugzilla.redhat.com/show_bug.cgi?id=2269228 - https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html - https://minerva.crocs.fi.muni.cz/
CVE ID: CVE-2024-28835 State: PUBLISHED Published: 2024-03-21T06:13:26.916Z Last Updated: 2025-11-06T22:40:20.614Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 Problem Types: CWE-248 Description: A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
using the "certtool --verify-chain" command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1879 - https://access.redhat.com/errata/RHSA-2024:2570 - https://access.redhat.com/errata/RHSA-2024:2889 - https://access.redhat.com/security/cve/CVE-2024-28835 - https://bugzilla.redhat.com/show_bug.cgi?id=2269084 - https://lists.gnupg.org/pipermail/gnutls-help/2024-March/004845.html
CVE ID: CVE-2024-28836 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-11-18T21:32:24.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implementation of the protocol if it is disabled. If the TLS 1.2 implementation was disabled at build time, a TLS 1.2 client could put a TLS 1.3-only server into an infinite loop processing a TLS 1.2 ClientHello, resulting in a denial of service. If the TLS 1.2 implementation was disabled at runtime, a TLS 1.2 client can successfully establish a TLS 1.2 connection with the server. Additi
tation was disabled at runtime, a TLS 1.2 client can successfully establish a TLS 1.2 connection with the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0
CVE ID: CVE-2024-28847 State: PUBLISHED Published: 2024-03-15T19:55:43.461Z Last Updated: 2024-08-27T19:40:47.183Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: open-metadata Products: OpenMetadata Problem Types: CWE-94 Description: OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250 issue, `AlertUtil::validateExpression` is also called from `EventSubscriptionRepository.prepare()`, which can lead to Remote Code Execution. `prepare()` is called from `EntityRepository.prepareInternal()` which, in turn, gets cal
lead to Remote Code Execution. `prepare()` is called from `EntityRepository.prepareInternal()` which, in turn, gets called from `EntityResource.createOrUpdate()`. Note that, even though there is an authorization check (`authorizer.authorize()`), it gets called after `prepareInternal()` gets called and, therefore, after the SpEL expression has been evaluated. In order to reach this method, an attacker can send a PUT request to `/api/v1/events/subscriptions` which gets handled by `EventSubscriptionResource.createOrUpdateEventSubscription()`. This vulnerability was discovered with the help of CodeQL's Expression language injection (Spring) query. This issue may lead to Remote Code Execution an
with the help of CodeQL's Expression language injection (Spring) query. This issue may lead to Remote Code Execution and has been addressed in version 1.2.4. Users are advised to upgrade. There are no known workarounds for this vulnerability. This issue is also tracked as `GHSL-2023-251`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-8p5r-6mvv-2435 - https://codeql.github.com/codeql-query-help/java/java-spel-expression-injection - https://github.com/open-metadata/OpenMetadata/blob/b6b337e09a05101506a5faba4b45d370cc3c9fc8/openmetadata-service/src/main/java/org/openmetadata/servi
ata/OpenMetadata/blob/b6b337e09a05101506a5faba4b45d370cc3c9fc8/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/EntityRepository.java#L693 - https://github.com/open-metadata/OpenMetadata/blob/b6b337e09a05101506a5faba4b45d370cc3c9fc8/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/EventSubscriptionRepository.java#L69-L83 - https://github.com/open-metadata/OpenMetadata/blob/b6b337e09a05101506a5faba4b45d370cc3c9fc8/openmetadata-service/src/main/java/org/openmetadata/service/resources/EntityResource.java#L219 - https://github.com/open-metadata/OpenMetadata/blob/b6b337e09a05101506a5faba4b45d370cc3c9fc8/openmetadata-service/src/main/java/org/openmetadata/service/