Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3416 State: PUBLISHED Published: 2019-09-23T13:55:01 Last Updated: 2024-08-04T19:12:09.406Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ZTE Products: ZXV10 B860A Problem Types: input validation Description: All versions up to V81511329.1008 of ZTE ZXV10 B860A products are impacted by input validation vulnerability. Due to input validation, unauthorized users can take advantage of this vulnerability to control the user terminal system. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011263
CVE ID: CVE-2019-3417 State: PUBLISHED Published: 2019-08-15T14:43:40 Last Updated: 2024-08-04T19:12:09.327Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: ZTE Products: ZXHN F670 Problem Types: Command Injection Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by command injection vulnerability. Due to insufficient parameter validation check, an authorized user can exploit this vulnerability to take control of user router system. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163
CVE ID: CVE-2019-3418 State: PUBLISHED Published: 2019-08-15T14:44:35 Last Updated: 2024-08-04T19:12:08.613Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: ZTE Products: ZXHN F670 Problem Types: Cross Site Scripting (XSS) Description: All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by cross-site scripting vulnerability (XSS). Due to incomplete input validation, an authorized user can exploit this vulnerability to execute malicious scripts. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010163
CVE ID: CVE-2019-3419 State: PUBLISHED Published: 2019-10-31T15:22:19 Last Updated: 2024-08-04T19:12:09.478Z Vendors: ZTE Corporation Products: ZXMP M721 DX Problem Types: Resource Management Error Description: A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific packets to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011542
CVE ID: CVE-2019-3420 State: PUBLISHED Published: 2019-11-13T22:29:36 Last Updated: 2024-08-04T19:12:09.436Z Vendors: n/a Products: ZXHN H108N Problem Types: information leak Description: All versions up to V2.5.0_EG1T5_TED of ZTE ZXHN H108N product are impacted by an information leak vulnerability. An attacker could exploit the vulnerability to obtain sensitive information and perform unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011802
CVE ID: CVE-2019-3421 State: PUBLISHED Published: 2019-10-31T15:27:46 Last Updated: 2024-08-04T19:12:09.400Z Vendors: ZTE Corporation Products: ZX297520V3 Problem Types: Command Injection Description: The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the user terminal system. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011643
CVE ID: CVE-2019-3422 State: PUBLISHED Published: 2019-11-07T19:18:52 Last Updated: 2024-08-04T19:12:09.470Z Vendors: ZTE Products: MF910S Problem Types: information disclosure Description: The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure vulnerability is confirmed. The MF910S product's one-click upgrade tool can obtain the Telnet remote login password in the reverse way. If Telnet is opened, the attacker can remotely log in to the device through the cracked password, resulting in information leakage. The MF910S was end of service on October 23
o the device through the cracked password, resulting in information leakage. The MF910S was end of service on October 23, 2019, ZTE recommends users to choose new products for the purpose of better security. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011722 - http://seclists.org/fulldisclosure/2020/Aug/20 - http://packetstormsecurity.com/files/158990/ZTE-Mobile-Hotspot-MS910S-Backdoor-Hardcoded-Password.html
CVE ID: CVE-2019-3423 State: PUBLISHED Published: 2019-11-18T18:19:44 Last Updated: 2024-08-04T19:12:09.415Z Vendors: ZTE Corporation Products: C520V21 Problem Types: Permission and Access Control Description: permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842
CVE ID: CVE-2019-3424 State: PUBLISHED Published: 2019-11-18T18:20:23 Last Updated: 2024-08-04T19:12:09.281Z Vendors: ZTE Corporation Products: C520V21 Problem Types: Authentication Issues Description: authentication issues vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can automatically obtain access to web services from the authorized browser of the same computer and perform operations. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011842
CVE ID: CVE-2019-3425 State: PUBLISHED Published: 2019-11-08T18:28:27 Last Updated: 2024-08-04T19:12:09.535Z Vendors: ZTE Corporation Products: ZXUPN-9000E Problem Types: permission and access control Description: The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by vulnerability of permission and access control. An attacker could exploit this vulnerability to directly reset or change passwords of other accounts. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
CVE ID: CVE-2019-3426 State: PUBLISHED Published: 2019-11-08T18:29:03 Last Updated: 2024-08-04T19:12:09.475Z Vendors: ZTE Corporation Products: ZXUPN-9000E Problem Types: input validation Description: The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011683
CVE ID: CVE-2019-3427 State: PUBLISHED Published: 2019-11-22T15:49:20 Last Updated: 2024-08-04T19:12:09.379Z Vendors: ZTE Products: ZXCDN IAMWEB Problem Types: code injection Description: The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a code injection vulnerability. An attacker could exploit the vulnerability to inject malicious code into the management page, resulting in users’ information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863
CVE ID: CVE-2019-3428 State: PUBLISHED Published: 2019-11-22T15:49:50 Last Updated: 2024-08-04T19:12:09.283Z Vendors: ZTE Products: ZXCDN IAMWEB Problem Types: configuration error Description: The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863
CVE ID: CVE-2019-3429 State: PUBLISHED Published: 2019-12-23T18:09:15 Last Updated: 2024-08-04T19:12:09.459Z Vendors: ZTE Products: ZXCLOUD GoldenData VAP Problem Types: file reading vulnerability Description: All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023
CVE ID: CVE-2019-3430 State: PUBLISHED Published: 2019-12-23T18:09:41 Last Updated: 2024-08-04T19:12:09.462Z Vendors: ZTE Products: ZXCLOUD GoldenData VAP Problem Types: information disclosure Description: All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023
CVE ID: CVE-2019-3431 State: PUBLISHED Published: 2019-12-23T18:10:06 Last Updated: 2024-08-04T19:12:09.516Z Vendors: ZTE Products: ZXCLOUD GoldenData VAP Problem Types: encryption problems Description: All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have encryption problems vulnerability. Attackers could sniff unencrypted account and password through the network for front-end system access. Additional Analyst Notes: - CVE Program Container: References: - http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023
CVE ID: CVE-2019-3459 State: PUBLISHED Published: 2019-04-11T15:53:35 Last Updated: 2024-08-04T19:12:09.320Z Vendors: Linux Products: Linux Problem Types: information leak Description: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=oss-security&m=154721580222522&w=2 - https://lore.kernel.org/linux-bluetooth/20190110062833.GA15047%40kroah.com/ - https://git.kernel.org/linus/7c9cbd0b5e38a1672fcd137894ace3b042dfbf69 - https://bugzilla.redhat.com/show_bug.cgi?id=1663176 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3459.html
bugzilla.redhat.com/show_bug.cgi?id=1663176 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3459.html - https://bugzilla.novell.com/show_bug.cgi?id=1120758 - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - http://www.openwall.com/lists/oss-security/2019/06/27/2 - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.com/lists/oss-security/2019/06/28/1 - http://www.openwall.com/lists/oss-security/2019/06/28/2 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RH
/lists/oss-security/2019/06/28/2 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - http://www.openwall.com/lists/oss-security/2019/08/12/1 - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-3460 State: PUBLISHED Published: 2019-04-11T16:00:20 Last Updated: 2024-08-04T19:12:09.515Z Vendors: Linux Products: Linux Problem Types: information leak Description: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1. Additional Analyst Notes: - CVE Program Container: References: - https://marc.info/?l=oss-security&m=154721580222522&w=2 - https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/ - https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0 - https://bugzilla.redhat.com/show_bug.cgi?id=1663179 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460
tps://bugzilla.redhat.com/show_bug.cgi?id=1663179 - https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html - https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html - http://www.openwall.com/lists/oss-security/2019/06/27/2 - http://www.openwall.com/lists/oss-security/2019/06/27/7 - http://www.openwall.com/lists/oss-security/2019/06/28/1 - http://www.openwall.com/lists/oss-security/2019/06/28/2 - https://access.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - http://www.openwall.com/lists/oss
s.redhat.com/errata/RHSA-2019:2043 - https://access.redhat.com/errata/RHSA-2019:2029 - http://www.openwall.com/lists/oss-security/2019/08/12/1 - https://access.redhat.com/errata/RHSA-2019:3309 - https://access.redhat.com/errata/RHSA-2019:3517 - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-3461 State: PUBLISHED Published: 2019-02-04T18:00:00Z Last Updated: 2024-09-16T22:56:42.618Z Vendors: Debian GNU/Linux Products: tmpreaper Problem Types: Local privilege escalation Description: Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a (bind) mount via rename() which could result in local privilege escalation. Mounting via rename() could potentially lead to a file being placed elsewhereon the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. Fixed versions include 1.6.13+nmu1+deb9u1 and 1.6.14. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/de
.13+nmu1+deb9u1 and 1.6.14. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00017.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=918956 - https://lists.debian.org/debian-security-announce/2019/msg00003.html - https://usn.ubuntu.com/4077-1/
CVE ID: CVE-2019-3462 State: PUBLISHED Published: 2019-01-28T21:00:00Z Last Updated: 2024-09-16T16:32:28.586Z Vendors: Debian GNU/Linux Products: apt as used in Debian Stretch and Ubuntu Problem Types: Remote code execution in apt Description: Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106690 - https://usn.ubuntu.com/3863-1/ - https://usn.ubuntu.com/3863-2/ - https://lists.debian.org/debian-lts-announce/2019/01/msg000
://usn.ubuntu.com/3863-1/ - https://usn.ubuntu.com/3863-2/ - https://lists.debian.org/debian-lts-announce/2019/01/msg00013.html - https://www.debian.org/security/2019/dsa-4371 - https://lists.debian.org/debian-lts-announce/2019/01/msg00014.html - https://security.netapp.com/advisory/ntap-20190125-0002/ - https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E
CVE ID: CVE-2019-3463 State: PUBLISHED Published: 2019-02-06T19:00:00Z Last Updated: 2024-09-17T01:31:33.198Z Vendors: Debian GNU/Linux Products: rssh Problem Types: Incomplete sanitization of passed arguments Description: Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4382 - https://lists.debian.org/debian-lts-announce/2019/02/msg00007.html - http://www.securityfocus.com/bid/106839 - https://tracker.d
lists.debian.org/debian-lts-announce/2019/02/msg00007.html - http://www.securityfocus.com/bid/106839 - https://tracker.debian.org/news/1026713/accepted-rssh-234-5deb9u2-source-amd64-into-stable-embargoed-stable/ - https://usn.ubuntu.com/3946-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HO3MDU3AH5SLYBKHH5PJ6PHC63ASIF42/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T42YYNWJZG422GATWAHAEK4A24OKY557/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN/ - https://security.gentoo.org/glsa/202007-29 - http://se
sts.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN/ - https://security.gentoo.org/glsa/202007-29 - http://seclists.org/fulldisclosure/2021/May/78
CVE ID: CVE-2019-3464 State: PUBLISHED Published: 2019-02-06T19:00:00Z Last Updated: 2024-09-17T04:29:35.125Z Vendors: Debian GNU/Linux Products: rssh Problem Types: Incomplete sanitization of environment variable Description: Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2019/dsa-4382 - https://lists.debian.org/debian-lts-announce/2019/02/msg00007.html - http://www.securityfocus.com/bid/106839 - h
-4382 - https://lists.debian.org/debian-lts-announce/2019/02/msg00007.html - http://www.securityfocus.com/bid/106839 - https://tracker.debian.org/news/1026713/accepted-rssh-234-5deb9u2-source-amd64-into-stable-embargoed-stable/ - https://usn.ubuntu.com/3946-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HO3MDU3AH5SLYBKHH5PJ6PHC63ASIF42/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T42YYNWJZG422GATWAHAEK4A24OKY557/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN/ - https://security.gentoo.org/glsa/20200
ge-announce%40lists.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN/ - https://security.gentoo.org/glsa/202007-29 - http://seclists.org/fulldisclosure/2021/May/78
CVE ID: CVE-2019-3465 State: PUBLISHED Published: 2019-11-07T19:12:33 Last Updated: 2024-08-04T19:12:09.411Z Vendors: n/a Products: Rob Richards XmlSecLibs Problem Types: Improper Verification of Cryptographic Signature Description: Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating a crafted XML message. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/11/msg00003.html - https://seclists.org/bugtraq/2019/Nov/8 - https://
https://lists.debian.org/debian-lts-announce/2019/11/msg00003.html - https://seclists.org/bugtraq/2019/Nov/8 - https://www.debian.org/security/2019/dsa-4560 - https://github.com/robrichards/xmlseclibs/commit/0a53d3c3aa87564910cae4ed01416441d3ae0db5 - https://simplesamlphp.org/security/201911-01 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AB34ILMJ67CUROBOR6YPKB46VHXLOAJ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAWOVYLZKYDCQBLQEJCFAAD3KQTBPHXE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESKJTWLE7QZBQ3EKMYXKMBQG3JDEJWM6/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESKJTWLE7QZBQ3EKMYXKMBQG3JDEJWM6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7KID7C4AZPYYIZQIPSLANP4R2RQR6YK3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XBSSRV5Q7JFCYO46A3EN624UZ4KXFQ2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HBE2SJSXG7J4XYLJ2H6HC2VPPOG2OMUN/ - https://www.tenable.com/security/tns-2019-09 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BNFMY5RRLU63P25HEBVDO5KAVI7TX7JV/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BNFMY5RRLU63P25HEBVDO5KAVI7TX7JV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBKVDUZ7G5ZOUO4BFJWLNJ6VOKBQJX5U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCSR3V6LNWJAD37VQB6M2K7P4RQSCVFG/
CVE ID: CVE-2019-3466 State: PUBLISHED Published: 2019-11-20T17:16:16 Last Updated: 2024-08-04T19:12:09.467Z Vendors: n/a Products: postgresql-common (Debian-specific Postgres management tools) Problem Types: Insufficient drop of privileges Description: The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.mirch.io/2019/11/15/cve-2019-3466-debian-ubuntu-pg_ctlcluster-privilege-escalation/ - https://usn.ubuntu.com/4194-2/
CVE ID: CVE-2019-3467 State: PUBLISHED Published: 2019-12-23T18:04:11 Last Updated: 2024-08-04T19:12:09.531Z Vendors: Debian Products: Debian Edu Problem Types: too permissive access control settings Description: Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/12/msg00023.html - https://seclists.org/bugtraq/2019/Dec/34 - https://www.debian.org/security/2019/dsa-4589 - https://bug
2/msg00023.html - https://seclists.org/bugtraq/2019/Dec/34 - https://www.debian.org/security/2019/dsa-4589 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946797 - https://security-tracker.debian.org/tracker/CVE-2019-3467 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947459 - https://www.debian.org/security/2019/dsa-4595 - https://seclists.org/bugtraq/2019/Dec/44 - https://lists.debian.org/debian-lts-announce/2020/01/msg00012.html - https://usn.ubuntu.com/4530-1/
CVE ID: CVE-2019-3468 State: REJECTED Published: 2020-01-06T17:55:27 Last Updated: 2020-01-06T17:55:27 Description: No description available.
CVE ID: CVE-2019-3469 State: REJECTED Published: 2020-01-06T17:55:35 Last Updated: 2020-01-06T17:55:35 Description: No description available.
CVE ID: CVE-2019-3470 State: REJECTED Published: 2020-01-06T17:55:48 Last Updated: 2020-01-06T17:55:48 Description: No description available.
CVE ID: CVE-2019-3471 State: REJECTED Published: 2020-01-06T17:55:56 Last Updated: 2020-01-06T17:55:56 Description: No description available.
CVE ID: CVE-2019-3472 State: REJECTED Published: 2020-01-06T17:56:03 Last Updated: 2020-01-06T17:56:03 Description: No description available.
CVE ID: CVE-2019-3473 State: REJECTED Published: 2020-01-06T17:56:11 Last Updated: 2020-01-06T17:56:11 Description: No description available.