deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10030
Published: 2020-05-19
Description: An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname() does not have '\0' termination of the returned string if the hostname is larger than the supplied buffer. (Linux systems are not affected because the buffer is always large enough. OpenBSD systems are not affected because the returned hostname always has '\0' termination.) Under some conditions, this issue can lead to the writing of one '\0' byte out-of-bounds on the stack, causing a denial of service or possibly arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00052.html; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMP72NJGKBWR5WEBXAWX5KSLQUDFTG6S/
CVE: CVE-2020-10134
Published: 2020-05-19
Description: Pairing in Bluetooth® Core v5.2 and earlier may permit an unauthenticated attacker to acquire credentials with two pairing devices via adjacent access when the unauthenticated user initiates different pairing methods in each peer device and an end-user erroneously completes both pairing procedures with the MITM using the confirmation number of one peer as the passkey of the other. An adjacent, unauthenticated attacker could be able to initiate any Bluetooth operation on either attacked device exposed by the enabled Bluetooth profiles. This exposure may be limited when the user must authorize certain access explicitly, but so long as a user assumes that it is the intended remote device requesting permissions, device-local protections may be weakened.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-351, CWE-436
References: https://kb.cert.org/vuls/id/534195/; https://www.bluetooth.com/learn-about-bluetooth/bluetooth-technology/bluetooth-security/method-vulnerability/; https://kb.cert.org/vuls/id/534195/
CVE: CVE-2020-10135
Published: 2020-05-19
Description: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent attacker could impersonate a Bluetooth BR/EDR master or slave to pair with a previously paired remote device to successfully complete the authentication procedure without knowing the link key.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-757, CWE-290
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00047.html; http://packetstormsecurity.com/files/157922/Bluetooth-Impersonation-Attack-BIAS-Proof-Of-Concept.html
CVE: CVE-2020-11807
Published: 2020-05-19
Description: Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal commands) on a server by making an avatar update and then visiting the avatar file under the /images/ path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://gist.github.com/V-Rico/82e9e52ac451dc20eef87b0999b3b1ee; https://github.com/sourcefabric/Newscoop/blob/3df835637609a5a42530b2a4611177c634ad6274/newscoop/library/Newscoop/Image/ImageService.php#L226; https://gist.github.com/V-Rico/82e9e52ac451dc20eef87b0999b3b1ee
CVE: CVE-2020-10995
Published: 2020-05-19
Description: PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted reply by an authoritative name server to amplify the resulting traffic between the recursive and other authoritative name servers. Both types of service can suffer degraded performance as an effect. This is triggered by random subdomains in the NSDNAME in NS records. PowerDNS Recursor 4.1.16, 4.2.2 and 4.3.1 contain a mitigation to limit the impact of this DNS protocol issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00052.html; http://www.nxnsattack.com; https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-01.html
CVE: CVE-2020-11715
Published: 2020-05-19
Description: Panasonic P99 devices through 2020-04-10 have Incorrect Access Control. NOTE: the vendor states that all affected products are at "End-of-software-support."
CVSS Score: 9.8 (CRITICAL)
References: https://mobile.panasonic.com/in/advisory; https://mobile.panasonic.com/in/advisory
CVE: CVE-2020-10722
Published: 2020-05-19
Description: A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html; https://bugs.dpdk.org/show_bug.cgi?id=267; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10722
CVE: CVE-2020-10723
Published: 2020-05-19
Description: A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html; https://bugs.dpdk.org/show_bug.cgi?id=268; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10723
CVE: CVE-2020-10724
Published: 2020-05-19
Description: A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is missing validations for user-supplied values, potentially allowing an information leak through an out-of-bounds memory read.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-190, CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html; https://bugs.dpdk.org/show_bug.cgi?id=269; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10724
CVE: CVE-2020-11766
Published: 2020-05-19
Description: sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: ftp://ftp.ifax.com/security/CVE-2020-11766.html; ftp://ftp.ifax.com/security/CVE-2020-11766.html
CVE: CVE-2020-13166
Published: 2020-05-19
Description: The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/157808/Plesk-myLittleAdmin-ViewState-.NET-Deserialization.html; https://ssd-disclosure.com/ssd-advisory-mylittleadmin-preauth-rce/; http://packetstormsecurity.com/files/157808/Plesk-myLittleAdmin-ViewState-.NET-Deserialization.html
CVE: CVE-2020-13167
Published: 2020-05-19
Description: Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://ssd-disclosure.com/ssd-advisory-netsweeper-preauth-rce/; https://ssd-disclosure.com/ssd-advisory-netsweeper-preauth-rce/
CVE: CVE-2020-2024
Published: 2020-05-19
Description: An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://github.com/kata-containers/runtime/issues/2474; https://github.com/kata-containers/runtime/pull/2475; https://github.com/kata-containers/runtime/issues/2474
CVE: CVE-2020-2025
Published: 2020-05-19
Description: Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-281
References: https://github.com/kata-containers/runtime/pull/2487; https://github.com/kata-containers/runtime/pull/2487
CVE: CVE-2020-7656
Published: 2020-05-19
Description: jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://snyk.io/vuln/SNYK-JS-JQUERY-569619; https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US
CVE: CVE-2020-12038
Published: 2020-05-19
Description: Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable. A memory corruption vulnerability exists in the algorithm that matches square brackets in the EDS subsystem. This may allow an attacker to craft specialized EDS files to crash the EDSParser COM object, leading to denial-of-service conditions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://www.us-cert.gov/ics/advisories/icsa-20-140-01; https://www.us-cert.gov/ics/advisories/icsa-20-140-01
CVE: CVE-2020-13163
Published: 2020-05-19
Description: em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://github.com/ConradIrwin/em-imap/issues/25; https://securitylab.github.com/advisories/GHSL-2020-095-conradirwin-em-imap; https://github.com/ConradIrwin/em-imap/issues/25
CVE: CVE-2020-13164
Published: 2020-05-19
Description: In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00038.html; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16476
CVE: CVE-2020-7137
Published: 2020-05-19
Description: A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.25.46 or later to resolve this issue.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04004en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04004en_us
CVE: CVE-2020-7138
Published: 2020-05-19
Description: Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to gain elevated privileges on the array. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
CVSS Score: 8.8 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03992en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03992en_us
CVE: CVE-2020-7139
Published: 2020-05-19
Description: Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attacker to access and modify sensitive information on the system. The following NimbleOS versions, and all subsequent releases, contain a software fix for this vulnerability: 3.9.3.0 4.5.6.0 5.0.9.0 5.1.4.100
CVSS Score: 8.1 (HIGH)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03991en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03991en_us
CVE: CVE-2020-12034
Published: 2020-05-20
Description: Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, RSNetWorx software: Version 28.00.00 and prior, Studio 5000 Logix Designer software: Version 32 and prior) is vulnerable.The EDS subsystem does not provide adequate input sanitation, which may allow an attacker to craft specialized EDS files to inject SQL queries and manipulate the database storing the EDS files. This can lead to denial-of-service conditions.
CVSS Score: 8.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.us-cert.gov/ics/advisories/icsa-20-140-01; https://www.us-cert.gov/ics/advisories/icsa-20-140-01
CVE: CVE-2020-9753
Published: 2020-05-20
Description: Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://cve.naver.com/detail/cve-2020-9753; https://cve.naver.com/detail/cve-2020-9753
CVE: CVE-2020-13225
Published: 2020-05-20
Description: phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpipam/phpipam/issues/3025; https://www.youtube.com/watch?v=SpFmM03Jl40; https://github.com/phpipam/phpipam/issues/3025
CVE: CVE-2019-11048
Published: 2020-05-20
Description: In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of uncleaned temporary files exhausting the disk space on the target server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190, CWE-400, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00045.html; https://bugs.php.net/bug.php?id=78875; https://bugs.php.net/bug.php?id=78876
CVE: CVE-2019-5997
Published: 2020-05-20
Description: Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://downloadvi.com/downloads/IPServer/v7.6/76148/v76148RN.pdf; https://jvn.jp/en/jp/JVN96646182/index.html; http://downloadvi.com/downloads/IPServer/v7.6/76148/v76148RN.pdf
CVE: CVE-2020-5579
Published: 2020-05-20
Description: SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN20248858/index.html; https://www.paidmembershipspro.com/pmpro-update-2-3-3-security-release/; https://jvn.jp/en/jp/JVN20248858/index.html
CVE: CVE-2020-13226
Published: 2020-05-20
Description: WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://docs.wso2.com/display/Security/Security+Advisories; https://docs.wso2.com/display/Security/WSO2+Security+Vulnerability+Management+Process; https://github.com/wso2/docs-apim/issues/816
CVE: CVE-2020-12835
Published: 2020-05-20
Description: An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://packetstormsecurity.com/files/157772/Protection-Licensing-Toolkit-ReadyAPI-3.2.5-Code-Execution-Deserialization.html; http://seclists.org/fulldisclosure/2020/May/38; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-039.txt
CVE: CVE-2020-13152
Published: 2020-05-20
Description: A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html; https://r00texpl0it.wordpress.com/2020/05/20/kde-amarok-2-8-0-allows-remote-attackers-to-cause-a-denial-of-service/; http://packetstormsecurity.com/files/159898/Amarok-2.8.0-Denial-Of-Service.html
CVE: CVE-2020-4461
Published: 2020-05-20
Description: IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/181481; https://www.ibm.com/support/pages/node/6211847; https://exchange.xforce.ibmcloud.com/vulnerabilities/181481
CVE: CVE-2020-9409
Published: 2020-05-20
Description: The administrative UI component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an unauthenticated attacker to obtain the permissions of a JasperReports Server "superuser" for the affected systems. The attacker can theoretically exploit the vulnerability consistently, remotely, and without authenticating. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Server: versions 7.1.1 and below, TIBCO JasperReports Server for AWS Marketplace: versions 7.1.1 and below, and TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.1.1 and below.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: http://www.tibco.com/services/support/advisories; https://www.oracle.com/security-alerts/cpuoct2020.html; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-9410
Published: 2020-05-20
Description: The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server for AWS Marketplace, and TIBCO JasperReports Server for ActiveMatrix BPM contains a vulnerability that theoretically allows an attacker to exploit HTML injection to gain full control of a web interface containing the output of the report generator component with the privileges of any user that views the affected report(s). The attacker can theoretically exploit this vulnerability when other users view a maliciously generated report, where those reports use Fusion Charts and a data source with contents controlled by the attacker. Affected releases are TIBCO Software Inc.'s TIBCO JasperReports Library: versions 7.1.1 and below, versions 7.2.0 and 7.2.1, version 7.3.0, version 7.5.0, TIBCO JasperReports Library for ActiveMatrix BPM: versions 7.1.1 and below, TIBCO JasperReports Server: versions 7.1.1 and below, version 7.2.0, version 7.5.0, TIBCO JasperReports Server for AWS Marketplace: versions 7.5.0 and below, and TIBCO JasperReports Server for ActiveMatrix BPM: versions 7.1.1 and below.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: http://www.tibco.com/services/support/advisories; https://www.oracle.com/security-alerts/cpuoct2020.html; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-10725
Published: 2020-05-20
Description: A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could result in a loss of connectivity for the other guests running on that host. This is caused by a missing validity check of the descriptor address in the function `virtio_dev_rx_batch_packed()`.
CVSS Score: 7.7 (HIGH)
CWE: CWE-665, CWE-665
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html; https://bugs.dpdk.org/show_bug.cgi?id=270; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10725
CVE: CVE-2020-10726
Published: 2020-05-20
Description: A vulnerability was found in DPDK versions 19.11 and above. A malicious container that has direct access to the vhost-user socket can keep sending VHOST_USER_GET_INFLIGHT_FD messages, causing a resource leak (file descriptors and virtual memory), which may result in a denial of service.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html; https://bugs.dpdk.org/show_bug.cgi?id=271; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10726
CVE: CVE-2020-11716
Published: 2020-05-20
Description: Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://mobile.panasonic.com/in/advisory; https://mobile.panasonic.com/in/advisory
CVE: CVE-2020-13230
Published: 2020-05-20
Description: In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-281
References: https://github.com/Cacti/cacti/issues/3343; https://github.com/Cacti/cacti/releases/tag/release%2F1.2.11; https://lists.debian.org/debian-lts-announce/2022/03/msg00038.html
CVE: CVE-2020-13231
Published: 2020-05-20
Description: In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Cacti/cacti/issues/3342; https://github.com/Cacti/cacti/releases/tag/release%2F1.2.11; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICJMWSY77IIGZYR6FE6NAQZFBO42VECO/
CVE: CVE-2020-1955
Published: 2020-05-20
Description: CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server called `require_valid_user_except_for_up`. It was meant as an extension to the long standing setting `require_valid_user`, which in turn requires that any and all requests to CouchDB will have to be made with valid credentials, effectively forbidding any anonymous requests. The new `require_valid_user_except_for_up` is an off-by-default setting that was meant to allow requiring valid credentials for all endpoints except for the `/_up` endpoint. However, the implementation of this made an error that lead to not enforcing credentials on any endpoint, when enabled. CouchDB versions 3.0.1[1] and 3.1.0[2] fix this issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://docs.couchdb.org/en/master/cve/2020-1955.html; https://docs.couchdb.org/en/master/cve/2020-1955.html