Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00080.html - https://access.redhat.com/errata/RHSA-2019:2304 - https://access.redhat.com/errata/RHSA-2019:2439 - https://access.redhat.com/errata/RHSA-2019:2437 - https://access.redhat.com/errata/RHSA-2019:2471 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/ - https://access.redhat.
hives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/ - https://access.redhat.com/errata/RHSA-2019:3929 - https://access.redhat.com/errata/RHSA-2019:3931 - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://usn.ubuntu.com/4376-2/ - https://www.oracle.com/security-alerts/cpujan2021.html - https://security.netapp.com/advisory/ntap-20190301-0001/ - https://security.netapp.com/advisory/ntap-20190301-0002/ -
- https://security.netapp.com/advisory/ntap-20190301-0001/ - https://security.netapp.com/advisory/ntap-20190301-0002/ - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9bbefbf0f24c57645e7ad6a5a71ae649d18ac8e - https://www.openssl.org/news/secadv/20190226.txt - https://support.f5.com/csp/article/K18549143 - https://www.tenable.com/security/tns-2019-02 - https://security.netapp.com/advisory/ntap-20190423-0002/ - https://www.tenable.com/security/tns-2019-03 - https://kc.mcafee.com/corporate/index?page=content&id=SB10282 - https://support.f5.com/csp/article/K18549143?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2019-1560 State: REJECTED Published: 2020-09-10T14:03:01 Last Updated: 2020-09-10T15:17:31 Description: No description available.
CVE ID: CVE-2019-1561 State: REJECTED Published: 2020-09-10T14:02:26 Last Updated: 2020-09-10T15:16:10 Description: No description available.
CVE ID: CVE-2019-1562 State: REJECTED Published: 2020-09-10T13:48:05 Last Updated: 2020-09-10T14:44:11 Description: No description available.
CVE ID: CVE-2019-1563 State: PUBLISHED Published: 2019-09-10T16:58:35.407714Z Last Updated: 2024-09-17T01:11:46.014Z Vendors: OpenSSL Products: OpenSSL Problem Types: Padding Oracle Description: In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions t
not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s). Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/bugtraq/2019/Sep/25 - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg000
ject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/ - https://seclists.org/bugtraq/2019/Oct/1 - https://seclists.org/bugtraq/2019/Oct/0 - https://www.debian.org/security/2019/dsa-4539 - https://www.debian.org/security/2019/dsa-4540 - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html - https://security.gentoo.org/glsa/2
2.html - http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html - https://security.gentoo.org/glsa/201911-04 - https://usn.ubuntu.com/4376-1/ - https://www.oracle.com/security-alerts/cpuapr2020.html - https://www.oracle.com/security-alerts/cpujul2020.html - https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html - https://www.oracle.com/security-alerts/cpujan2020.html - https://www.openssl.org/news/secadv/20190910.txt - http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html - https://security.netapp.com/advisory/ntap-20190919-0002/ - https://www.tenable.com/security/tns-2019-09 - https://git.openssl.org/gitweb/?p=
app.com/advisory/ntap-20190919-0002/ - https://www.tenable.com/security/tns-2019-09 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=08229ad838c50f644d7e928e2eef147b4308ad64 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=631f94db0065c78181ca9ba5546ebc8bb3884b97 - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e21f8cf78a125cd3c8c0d1a1a6c8bb0b901f893f - https://support.f5.com/csp/article/K97324400?utm_source=f5support&amp%3Butm_medium=RSS - https://usn.ubuntu.com/4376-2/ - https://usn.ubuntu.com/4504-1/ - https://www.oracle.com/security-alerts/cpuoct2020.html - https://kc.mcafee.com/corporate/index?page=content&id=SB10365
CVE ID: CVE-2019-1564 State: REJECTED Published: 2020-09-10T13:52:10 Last Updated: 2020-09-10T15:00:39 Description: No description available.
CVE ID: CVE-2019-1565 State: PUBLISHED Published: 2019-01-30T20:00:00Z Last Updated: 2024-09-16T18:59:27.071Z Vendors: Palo Alto Networks Products: Palo Alto Networks PAN-OS Problem Types: Cross-Site Scripting (XSS) Description: The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106752 - https://security.paloaltonetworks.com/CVE-2019-1565
CVE ID: CVE-2019-1566 State: PUBLISHED Published: 2019-01-30T20:00:00Z Last Updated: 2024-09-17T02:53:02.503Z Vendors: Palo Alto Networks Products: Palo Alto Networks PAN-OS Problem Types: Cross-Site Scripting (XSS) Description: The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106750 - https://security.paloaltonetworks.com/CVE-2019-1566 - https://www.purplemet.com/blog/palo-alto-firewall-multiple-xss-vulnerabilities
CVE ID: CVE-2019-1567 State: PUBLISHED Published: 2019-04-09T19:15:43 Last Updated: 2024-08-04T18:20:28.252Z Vendors: n/a Products: Palo Alto Networks Expedition Migration Tool Problem Types: Cross-site scripting Description: The Expedition Migration tool 1.1.6 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1567
CVE ID: CVE-2019-1568 State: PUBLISHED Published: 2019-05-09T17:51:11 Last Updated: 2024-08-04T18:20:28.420Z Vendors: Palo Alto Networks Products: Demisto Problem Types: Cross-site scripting Description: Cross-site scripting (XSS) vulnerability in Palo Alto Networks Demisto 4.5 build 40249 may allow an unauthenticated attacker to run arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1568
CVE ID: CVE-2019-1569 State: PUBLISHED Published: 2019-03-26T21:44:41 Last Updated: 2024-08-04T18:20:27.788Z Vendors: Palo Alto Products: Palo Alto Networks Expedition Migration Tool Problem Types: Cross-site scripting Description: The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2019-13 - http://www.securityfocus.com/bid/107564 - https://securityadvisories.paloaltonetworks.com/Home/Detail/142
CVE ID: CVE-2019-1570 State: PUBLISHED Published: 2019-03-26T21:46:42 Last Updated: 2024-08-04T18:20:28.253Z Vendors: Palo Alto Products: Palo Alto Networks Expedition Migration Tool Problem Types: Cross-site scripting Description: The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings. Additional Analyst Notes: - CVE Program Container: References: - https://securityadvisories.paloaltonetworks.com/Home/Detail/142 - https://www.tenable.com/security/research/tra-2019-13 - http://www.securityfocus.com/bid/107564
CVE ID: CVE-2019-1571 State: PUBLISHED Published: 2019-03-26T22:08:44 Last Updated: 2024-08-04T18:20:27.865Z Vendors: Palo Alto Products: Palo Alto Networks Expedition Migration Tool Problem Types: Cross-site scripting Description: The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings. Additional Analyst Notes: - CVE Program Container: References: - https://securityadvisories.paloaltonetworks.com/Home/Detail/142 - https://www.tenable.com/security/research/tra-2019-13 - http://www.securityfocus.com/bid/107564
CVE ID: CVE-2019-1572 State: PUBLISHED Published: 2019-03-26T21:48:35 Last Updated: 2024-08-04T18:20:28.281Z Vendors: Palo Alto Networks Products: PAN-OS Problem Types: Other Description: PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107720 - https://security.paloaltonetworks.com/CVE-2019-1572
CVE ID: CVE-2019-1573 State: PUBLISHED Published: 2019-04-09T21:04:01.397792Z Last Updated: 2024-09-16T19:21:01.439Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Palo Alto Networks Products: GlobalProtect Agent Problem Types: CWE-226 Description: GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.or
ion and gain access as the user. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/192371 - http://www.securityfocus.com/bid/107868 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005 - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-783 - https://security.paloaltonetworks.com/CVE-2019-1573
CVE ID: CVE-2019-1574 State: PUBLISHED Published: 2019-04-12T16:57:14 Last Updated: 2024-08-04T18:20:28.244Z Vendors: Palo Alto Networks Products: Expedition Migration Tool Problem Types: Cross-site scripting Description: Cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition Migration tool 1.1.12 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the Devices View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107900 - https://security.paloaltonetworks.com/CVE-2019-1574
CVE ID: CVE-2019-1575 State: PUBLISHED Published: 2019-07-16T13:46:34 Last Updated: 2024-08-04T18:20:28.319Z Vendors: Palo Alto Products: Palo Alto Networks PAN-OS Problem Types: Information Disclosure Description: Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API key of the device and/or the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109176 - https://security.paloaltonetworks
otes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109176 - https://security.paloaltonetworks.com/CVE-2019-1575
CVE ID: CVE-2019-1576 State: PUBLISHED Published: 2019-07-16T13:44:21 Last Updated: 2024-08-04T18:20:28.275Z Vendors: Palo Alto Products: Palo Alto Networks PAN-OS Problem Types: Command Injection Description: Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1576
CVE ID: CVE-2019-1577 State: PUBLISHED Published: 2019-07-01T18:29:55 Last Updated: 2024-08-04T18:20:28.149Z Vendors: Palo Alto Networks Products: Traps Problem Types: Code injection Description: Code injection vulnerability in Palo Alto Networks Traps 5.0.5 and earlier may allow an authenticated attacker to inject arbitrary JavaScript or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109053 - https://security.paloaltonetworks.com/CVE-2019-1577
CVE ID: CVE-2019-1578 State: PUBLISHED Published: 2019-07-01T18:31:32 Last Updated: 2024-08-04T18:20:28.147Z Vendors: Palo Alto Networks Products: MineMeld Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/109056 - https://security.paloaltonetworks.com/CVE-2019-1578
CVE ID: CVE-2019-1579 State: PUBLISHED Published: 2019-07-19T21:12:19.000Z Last Updated: 2025-10-21T23:45:33.397Z Vendors: n/a Products: Palo Alto Networks GlobalProtect Portal/Gateway Interface Problem Types: Remote Code Execution Description: Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/109310 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https
ces: - http://www.securityfocus.com/bid/109310 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 - https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/ - https://security.paloaltonetworks.com/CVE-2019-1579
CVE ID: CVE-2019-1580 State: PUBLISHED Published: 2019-08-23T17:03:06 Last Updated: 2024-08-04T18:20:28.328Z Vendors: n/a Products: Palo Alto Networks PAN-OS Problem Types: Memory Corruption Description: Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secure Shell Daemon (SSHD) and corrupt arbitrary memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1580
CVE ID: CVE-2019-1581 State: PUBLISHED Published: 2019-08-23T17:06:23.679531Z Last Updated: 2024-09-17T00:56:45.260Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Palo Alto Networks Products: PAN-OS Problem Types: CWE-78 Description: A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root access to PAN-OS. This issue affects PAN-OS 7.1 versions prior to 7.1.24-h1, 7.1.25; 8.0 versions prior to 8.0.19-h1, 8.0.20; 8.1 versions prior to 8.1.9-h4, 8.1.10; 9.0 versions prior to 9.0.3-h3, 9.0.4. Additional Analyst Notes: -
-h1, 8.0.20; 8.1 versions prior to 8.1.9-h4, 8.1.10; 9.0 versions prior to 9.0.3-h3, 9.0.4. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1581
CVE ID: CVE-2019-1582 State: PUBLISHED Published: 2019-08-23T17:09:05 Last Updated: 2024-08-04T18:20:28.317Z Vendors: n/a Products: Palo Alto Networks PAN-OS Problem Types: Memory Corruption Description: Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client interactive session. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1582
CVE ID: CVE-2019-1583 State: PUBLISHED Published: 2019-08-23T17:14:19 Last Updated: 2024-08-04T18:20:28.263Z Vendors: n/a Products: Palo Alto Networks Twistlock Problem Types: Escalation of Privilege Description: Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to escalate privileges to that of another user. Active interaction with an affected component is required for the payload to execute on the victim. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1583
CVE ID: CVE-2019-1584 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-04T18:20:28.333Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Command Injection Description: A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were sent a malicious command from the Zingbox cloud, or if the Zingbox Inspector were tampered with to connect to an attacker's cloud endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-1584
CVE ID: CVE-2019-1585 State: PUBLISHED Published: 2019-03-06T21:00:00Z Last Updated: 2024-11-20T17:27:32.056Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode Problem Types: CWE-16 Description: A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers files for the bashroot component on an affected device. An attacker could exploit this vulnera
ration of certain sudoers files for the bashroot component on an affected device. An attacker could exploit this vulnerability by authenticating to the affected device with a crafted user ID, which may allow temporary administrative access to escalate privileges. A successful exploit could allow the attacker to escalate privileges on an affected device. This Vulnerability has been fixed in version 4.0(1h) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsec - http://www.securityfocus.com/bid/107312
CVE ID: CVE-2019-1586 State: PUBLISHED Published: 2019-05-03T14:45:23.327064Z Last Updated: 2024-11-21T19:36:20.282Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Cisco Products: Cisco Application Policy Infrastructure Controller (APIC) Problem Types: CWE-320 Description: A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure removal of cleartext encryption keys stored on local partitions in the hard drive of an affected device. An attacker could exploit this vulnera
cryption keys stored on local partitions in the hard drive of an affected device. An attacker could exploit this vulnerability by retrieving data from the physical disk on the affected partition(s). A successful exploit could allow the attacker to retrieve encryption keys, possibly allowing the attacker to further decrypt other data and sensitive information on the device, which could lead to the disclosure of confidential information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-apic-encrypt - http://www.securityfocus.com/bid/108158
CVE ID: CVE-2019-1587 State: PUBLISHED Published: 2019-05-03T14:45:15.900409Z Last Updated: 2024-11-21T19:36:31.794Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Cisco Products: Cisco Application Policy Infrastructure Controller (APIC) Problem Types: CWE-399 Description: A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attacker could exploit this vulnerability by issuing certain commands with filtered query results
er-supplied input. An attacker could exploit this vulnerability by issuing certain commands with filtered query results on the device. This action may cause returned messages to display confidential system information. A successful exploit could allow the attacker to read sensitive information on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-filter-query
CVE ID: CVE-2019-1588 State: PUBLISHED Published: 2019-03-06T22:00:00Z Last Updated: 2024-11-21T19:44:16.976Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Cisco Products: Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode Problem Types: CWE-20 Description: A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms of user-supplied input sent to an affected device. A successful exploit could allow the att
lidation checking mechanisms of user-supplied input sent to an affected device. A successful exploit could allow the attacker unauthorized access to read arbitrary files on an affected device. This vulnerability has been fixed in version 14.0(1h). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/107316 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-file-read