Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20230 State: PUBLISHED Published: 2021-02-23T16:34:39 Last Updated: 2024-08-03T17:30:07.599Z Vendors: n/a Products: stunnel Problem Types: CWE-295 Description: A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the tunneled service instead of being redirected to the address specified in the redirect option. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: Ref
The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1925226 - https://github.com/mtrojnar/stunnel/commit/ebad9ddc4efb2635f37174c9d800d06206f1edf9 - https://security.gentoo.org/glsa/202105-02
CVE ID: CVE-2021-20231 State: PUBLISHED Published: 2021-03-12T18:23:59 Last Updated: 2024-08-03T17:30:07.517Z Vendors: n/a Products: gnutls Problem Types: CWE-416 Description: A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1922276 - https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/ - https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be
roject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/ - https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E - https://security.netapp.com/advisory/ntap-20210416-0005/ - https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a
1935b70db2bd158%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E
CVE ID: CVE-2021-20232 State: PUBLISHED Published: 2021-03-12T18:25:29 Last Updated: 2024-08-03T17:37:22.666Z Vendors: n/a Products: gnutls Problem Types: CWE-416 Description: A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10 - https://bugzilla.redhat.com/show_bug.cgi?id=1922275 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/ - https://lists.apache.org/thread.html/r5f88b
nounce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/ - https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E - https://security.netapp.com/advisory/ntap-20210416-0005/ - https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rfd5273d72d
90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E - https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E
CVE ID: CVE-2021-20233 State: PUBLISHED Published: 2021-03-03T16:44:34 Last Updated: 2024-08-03T17:37:22.631Z Vendors: n/a Products: grub2 Problem Types: CWE-787 Description: A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://b
and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1926263 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/ - https://security.gentoo.org/glsa/202104-05 - https://security.netapp.com/advisory/ntap-20220325-0001/
CVE ID: CVE-2021-20234 State: PUBLISHED Published: 2021-04-01T13:46:33 Last Updated: 2024-08-03T17:37:22.655Z Vendors: n/a Products: zeromq Problem Types: CWE-400 Description: An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921972 - https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87
CVE ID: CVE-2021-20235 State: PUBLISHED Published: 2021-04-01T13:47:05 Last Updated: 2024-08-03T17:37:22.831Z Vendors: n/a Products: zeromq Problem Types: CWE-120 Description: There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server could trigger a buffer overflow WRITE of arbitrary data if CURVE/ZAP authentication is not enabled. The greatest impact of this flaw is to application availability, data integrity, and confidentiality. Additional Analyst Notes
eatest impact of this flaw is to application availability, data integrity, and confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921983 - https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6
CVE ID: CVE-2021-20236 State: PUBLISHED Published: 2021-05-28T10:42:19 Last Updated: 2024-08-03T17:37:23.102Z Vendors: n/a Products: zeromq Problem Types: CWE-120 Description: A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921976 - https://github.com/zeromq/libzmq/security/advisories/GHSA-qq65-x72m-9wr8
CVE ID: CVE-2021-20237 State: PUBLISHED Published: 2021-05-28T10:42:23 Last Updated: 2024-08-03T17:37:22.650Z Vendors: n/a Products: zeromq Problem Types: CWE-400 Description: An uncontrolled resource consumption (memory leak) flaw was found in ZeroMQ's src/xpub.cpp in versions before 4.3.3. This flaw allows a remote unauthenticated attacker to send crafted PUB messages that consume excessive memory if the CURVE/ZAP authentication is disabled on the server, causing a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921989 - https://github.com/z
Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921989 - https://github.com/zeromq/libzmq/security/advisories/GHSA-4p5v-h92w-6wxw
CVE ID: CVE-2021-20238 State: PUBLISHED Published: 2022-04-01T22:17:25 Last Updated: 2024-08-03T17:37:22.965Z Vendors: n/a Products: openshift/machine-config-operator Problem Types: CWE-287 Description: It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623) provides ignition configuration used for bootstrapping Nodes and can include some sensitive data, e.g. registry pull secrets. There are two scenarios where this data can be accessed. The first is on Baremetal, OpenStack, Ovirt, Vsphere and KubeVirt deployments which do not have a separate intern
essed. The first is on Baremetal, OpenStack, Ovirt, Vsphere and KubeVirt deployments which do not have a separate internal API endpoint and allow access from outside the cluster to port 22623 from the standard OpenShift API Virtual IP address. The second is on cloud deployments when using unsupported network plugins, which do not create iptables rules that prevent to port 22623. In this scenario, the ignition config is exposed to all pods within the cluster and cannot be accessed externally. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1926568
CVE ID: CVE-2021-20239 State: PUBLISHED Published: 2021-05-28T10:42:29 Last Updated: 2024-08-03T17:37:22.636Z Vendors: n/a Products: kernel Problem Types: CWE-822 Description: A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1923636
CVE ID: CVE-2021-20240 State: PUBLISHED Published: 2021-05-28T10:42:35 Last Updated: 2024-08-03T17:37:22.704Z Vendors: n/a Products: gdk-pixbuf Problem Types: CWE-191 Description: A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/ - https://bugzilla.redhat.com/show_bug.cgi?id=1926787
CVE ID: CVE-2021-20241 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T17:37:22.963Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928952 - https://github.com/ImageMagick/ImageMagick/pull/3177 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.
/ImageMagick/ImageMagick/pull/3177 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20242 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-20243 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T17:37:23.175Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928958 - https://github.com/ImageMagick/ImageMagick/pull/3193 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https:/
hub.com/ImageMagick/ImageMagick/pull/3193 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20244 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T17:37:23.075Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928959 - https://github.com/ImageMagick/ImageMagick/pull/3194 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html -
ps://github.com/ImageMagick/ImageMagick/pull/3194 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20245 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T17:37:23.309Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928943 - https://github.com/ImageMagick/ImageMagick/issues/3176 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lis
m/ImageMagick/ImageMagick/issues/3176 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20246 State: PUBLISHED Published: 2021-03-09T00:00:00 Last Updated: 2024-08-03T17:37:23.162Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928941 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/05/msg0002
ists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2021-20247 State: PUBLISHED Published: 2021-02-23T18:45:29 Last Updated: 2024-08-03T17:37:23.202Z Vendors: n/a Products: isync/mbsync Problem Types: CWE-20 Description: A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the opposite end of the synchronization channel. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/sho
ntiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928963 - https://www.openwall.com/lists/oss-security/2021/02/22/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXQLCK35QGRCRENRTGKJO4VVZGUXUJJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDEBZQJMWDW5JFK4NTHH6DAFNAZTESW/ - https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html - https://security.gentoo.org/glsa/202208-15
CVE ID: CVE-2021-20248 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-20249 State: REJECTED Published: 2021-06-21T15:29:47 Last Updated: 2021-06-21T15:29:47 Description: No description available.
CVE ID: CVE-2021-20250 State: PUBLISHED Published: 2021-05-13T13:35:25 Last Updated: 2024-08-03T17:37:23.015Z Vendors: n/a Products: wildfly Problem Types: CWE-200 Description: A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1929479
CVE ID: CVE-2021-20251 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T15:49:56.099Z Vendors: n/a Products: samba Problem Types: CWE-362 Description: A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1929800 - https://bugzilla.samba.org/show_bug.cgi?id=14611 - https://security.netapp.com/advisory/ntap-20230331-0005/ - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2021-20252 State: PUBLISHED Published: 2021-02-23T22:24:50 Last Updated: 2024-08-03T17:37:23.217Z Vendors: n/a Products: 3scale/backend Problem Types: CWE-20 Description: A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently large date range to eventually yield an internal server error resulting in denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?
availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928302
CVE ID: CVE-2021-20253 State: PUBLISHED Published: 2021-03-09T17:14:28 Last Updated: 2024-08-03T17:37:22.981Z Vendors: n/a Products: ansible-tower Problem Types: CWE-552 Description: A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928847
CVE ID: CVE-2021-20254 State: PUBLISHED Published: 2021-05-05T13:36:32 Last Updated: 2024-08-03T17:37:23.017Z Vendors: n/a Products: samba Problem Types: CWE-125 Description: A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Ana
mbership for a user. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1949442 - https://www.samba.org/samba/security/CVE-2021-20254.html - https://security.netapp.com/advisory/ntap-20210430-0001/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EP2VJ73OVBPVSOSTVOMGIEQA3MWF6F7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZAF6L2M6CNAJ2YYYGXPWETTW5YLCWTVT/ - https://security.gentoo.org/glsa/202105-22 - https://lists.debian.org/debian-lts-announce/2
6CNAJ2YYYGXPWETTW5YLCWTVT/ - https://security.gentoo.org/glsa/202105-22 - https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
CVE ID: CVE-2021-20255 State: PUBLISHED Published: 2021-03-09T19:14:05 Last Updated: 2024-08-03T17:37:23.158Z Vendors: n/a Products: QEMU Problem Types: CWE-835 Description: A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1930646 - htt
ditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1930646 - https://www.openwall.com/lists/oss-security/2021/02/25/1 - https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1 - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - https://security.netapp.com/advisory/ntap-20210507-0003/
CVE ID: CVE-2021-20256 State: PUBLISHED Published: 2021-02-23T22:31:21 Last Updated: 2024-08-03T17:37:23.215Z Vendors: n/a Products: Red Hat Satellite Problem Types: CWE-200 Description: A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1930926