deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9068
Published: 2018-07-26
Description: The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected. This information is made available for download through an SFTP server hosted on the IMM2 management network interface. In versions earlier than 4.90 for Lenovo System x and earlier than 6.80 for IBM System x, the credentials to access the SFTP server are hard-coded and described in the IMM2 documentation, allowing an attacker with management network access to obtain the collected FFDC data. After applying the update, the IMM2 will create random SFTP credentials for use with OneCLI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://support.lenovo.com/us/en/solutions/LEN-20227; https://support.lenovo.com/us/en/solutions/LEN-20227
CVE: CVE-2016-7470
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-7471
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-7473
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-9246
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-9248
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-9254
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-9255
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2016-9258
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016.  Notes: none
CVE: CVE-2017-6146
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA due to an erroneous publication.  Notes: none
CVE: CVE-2017-6149
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6170
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6171
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6172
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6173
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6174
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6175
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6176
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2017-6177
Published: 2018-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017.  Notes: none
CVE: CVE-2018-14607
Published: 2018-07-26
Description: Thomson Reuters UltraTax CS 2017 on Windows, in a client/server configuration, transfers customer records and bank account numbers in cleartext over SMBv2, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer record transferred in cleartext contains: Client ID, Full Name, Spouse's Full Name, Social Security Number, Spouse's Social Security Number, Occupation, Spouse's Occupation, Daytime Phone, Home Phone, Tax Preparer, Federal and State Taxes to File, Bank Name, Bank Account Number, and possibly other sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/; https://www.themikewylie.com/ultratax-cs-data-exposure-vulnerability-cve-2018-14608-cve-2018-14607/; https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/
CVE: CVE-2018-14608
Published: 2018-07-26
Description: Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories (%install_path%\WinCSI\UT17DATA\client_ID\file_name.XX17) that can be bypassed without authentication by examining the strings of the .XX17 file. The strings stored in the .XX17 file contain each customer's: Full Name, Spouse's Name, Social Security Number, Date of Birth, Occupation, Home Address, Daytime Phone Number, Home Phone Number, Spouse's Address, Spouse's Daytime Phone Number, Spouse's Social Security Number, Spouse's Home Phone Number, Spouse's Occupation, Spouse's Date of Birth, and Spouse's Filing Status.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/; https://www.themikewylie.com/ultratax-cs-data-exposure-vulnerability-cve-2018-14608-cve-2018-14607/; https://corporateblue.com/ultratax-cs-data-exposure-vulnerability/
CVE: CVE-2018-14601
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow.
CVSS Score: 7.5 (HIGH)
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/49409; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14602
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. Information Disclosure can occur because the Prometheus metrics feature discloses private project pathnames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://gitlab.com/gitlab-com/infrastructure/issues/4423; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14603
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. CSRF can occur in the Test feature of the System Hooks component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14604
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the tooltip of the job inside the CI/CD pipeline.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14605
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur in the branch name during a Web IDE file commit.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/47793; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14606
Published: 2018-07-27
Description: An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/; https://gitlab.com/gitlab-org/gitlab-ce/issues/48617; https://about.gitlab.com/2018/07/26/security-release-gitlab-11-dot-1-dot-2-released/
CVE: CVE-2018-14609
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_root() in fs/btrfs/relocation.c when mounting a crafted btrfs image, related to removing reloc rb_trees when reloc control has not been initialized.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=199833; https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
CVE: CVE-2018-14610
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in write_extent_buffer() when mounting and operating a crafted btrfs image, because of a lack of verification that each block group has a corresponding chunk at mount time, within btrfs_read_block_groups in fs/btrfs/extent-tree.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=199837; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14611
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in try_merge_free_space() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfs_check_chunk_valid in fs/btrfs/volumes.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=199839; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14612
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in btrfs_root_node() when mounting a crafted btrfs image, because of a lack of chunk block group mapping validation in btrfs_read_block_groups in fs/btrfs/extent-tree.c, and a lack of empty-tree checks in check_leaf in fs/btrfs/tree-checker.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=199847; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14613
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image, because of a lack of block group item validation in check_leaf_item in fs/btrfs/tree-checker.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=199849; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14614
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is an out-of-bounds access in __remove_dirty_segment() in fs/f2fs/segment.c when mounting an f2fs image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=200419; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14615
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncate_inline_inode() in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=200421; https://usn.ubuntu.com/4094-1/
CVE: CVE-2018-14616
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscrypt_do_page_crypto() in fs/crypto/crypto.c when operating on a file in a corrupted f2fs image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=200465; https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
CVE: CVE-2018-14617
Published: 2018-07-27
Description: An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference and panic in hfsplus_lookup() in fs/hfsplus/dir.c when opening a file (that is purportedly a hard link) in an hfs+ filesystem that has malformed catalog data, and is mounted read-only without a metadata directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/104917; https://bugzilla.kernel.org/show_bug.cgi?id=200297; https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html
CVE: CVE-2017-12151
Published: 2018-07-27
Description: A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
CVSS Score: 7.4 (HIGH)
CWE: CWE-300, CWE-310
References: http://www.securityfocus.com/bid/100917; http://www.securitytracker.com/id/1039401; https://access.redhat.com/errata/RHSA-2017:2790
CVE: CVE-2017-7464
Published: 2018-07-27
Description: It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use this flaw to cause DoS, SSRF, or information disclosure if they are able to provide XML content for parsing.
CVSS Score: 8.7 (HIGH)
CWE: CWE-611, CWE-611
References: http://www.securityfocus.com/bid/98450; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7464; http://www.securityfocus.com/bid/98450
CVE: CVE-2017-2622
Published: 2018-07-27
Description: An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable. A malicious system user could exploit this flaw to access sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-552, CWE-200
References: https://access.redhat.com/errata/RHSA-2017:1584; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2622; https://access.redhat.com/errata/RHSA-2017:1584
CVE: CVE-2017-2639
Published: 2018-07-27
Description: It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and communicating with Red Hat Virtualization (RHEV) and OpenShift. This would allow an attacker to spoof RHEV or OpenShift systems and potentially harvest sensitive information from CloudForms.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://www.securityfocus.com/bid/98769; http://www.securitytracker.com/id/1038599; https://access.redhat.com/errata/RHSA-2017:1367
CVE: CVE-2017-7470
Published: 2018-07-27
Description: It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: http://www.securityfocus.com/bid/98569; https://access.redhat.com/errata/RHSA-2017:1259; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7470
CVE: CVE-2018-6686
Published: 2018-07-27
Description: Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption (MDE) 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-287
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10242; https://kc.mcafee.com/corporate/index?page=content&id=SB10242
CVE: CVE-2017-2666
Published: 2018-07-27
Description: It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: http://rhn.redhat.com/errata/RHSA-2017-1409.html; http://www.securityfocus.com/bid/98966; https://access.redhat.com/errata/RHSA-2017:1410
CVE: CVE-2017-7519
Published: 2018-07-27
Description: In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library.
CVSS Score: 2.3 (LOW)
CWE: CWE-134, CWE-134
References: http://www.securityfocus.com/bid/99075; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519; https://www.debian.org/security/2018/dsa-4339
CVE: CVE-2018-10862
Published: 2018-07-27
Description: WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://access.redhat.com/errata/RHSA-2018:2276; https://access.redhat.com/errata/RHSA-2018:2277; https://access.redhat.com/errata/RHSA-2018:2279
CVE: CVE-2017-12165
Published: 2018-07-27
Description: It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.
CVSS Score: 2.6 (LOW)
CWE: CWE-444, CWE-444
References: https://access.redhat.com/errata/RHSA-2017:3454; https://access.redhat.com/errata/RHSA-2017:3455; https://access.redhat.com/errata/RHSA-2017:3456
CVE: CVE-2017-12195
Published: 2018-07-27
Description: A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-295
References: https://access.redhat.com/errata/RHSA-2017:3188; https://access.redhat.com/errata/RHSA-2017:3389; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195
CVE: CVE-2017-15120
Published: 2018-07-27
Description: An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://seclists.org/oss-sec/2017/q4/382; http://www.securityfocus.com/bid/106335; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120
CVE: CVE-2017-15125
Published: 2018-07-27
Description: A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/102287; https://access.redhat.com/errata/RHSA-2018:0380; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15125
CVE: CVE-2017-2595
Published: 2018-07-27
Description: It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-22
References: http://rhn.redhat.com/errata/RHSA-2017-1409.html; http://rhn.redhat.com/errata/RHSA-2017-1551.html; http://www.securityfocus.com/bid/98967
CVE: CVE-2017-2670
Published: 2018-07-27
Description: It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835, CWE-835
References: http://rhn.redhat.com/errata/RHSA-2017-1409.html; http://www.securityfocus.com/bid/98965; https://access.redhat.com/errata/RHSA-2017:1410
CVE: CVE-2017-7497
Published: 2018-07-27
Description: The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-284
References: https://access.redhat.com/errata/RHSA-2017:1601; https://access.redhat.com/errata/RHSA-2017:1758; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7497
CVE: CVE-2017-12148
Published: 2018-07-27
Description: A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repository) definition does not have the 'delete before update' flag set, an attacker with commit access to the upstream playbook source repository could create a Trojan playbook that, when executed by Tower, modifies the checked out SCM repository to add git hooks. These git hooks could, in turn, cause arbitrary command and code execution as the user Tower runs as.
CVSS Score: 8.4 (HIGH)
CWE: CWE-20, CWE-20
References: https://access.redhat.com/errata/RHSA-2017:3005; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12148; https://access.redhat.com/errata/RHSA-2017:3005
CVE: CVE-2017-12173
Published: 2018-07-27
Description: It was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized login environment, if a password hash was locally cached for a given user, an authenticated attacker could use this flaw to retrieve it.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-20, CWE-200
References: https://access.redhat.com/errata/RHSA-2017:3379; https://access.redhat.com/errata/RHSA-2018:1877; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12173