deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-4865
Published: 2021-01-27
Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190741; https://www.ibm.com/support/pages/node/6408694; https://exchange.xforce.ibmcloud.com/vulnerabilities/190741
CVE: CVE-2020-4952
Published: 2021-01-27
Description: IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.
CVSS Score: 8.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192028; https://www.ibm.com/support/pages/node/6408630; https://exchange.xforce.ibmcloud.com/vulnerabilities/192028
CVE: CVE-2021-20357
Published: 2021-01-27
Description: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194963; https://www.ibm.com/support/pages/node/6408694; https://exchange.xforce.ibmcloud.com/vulnerabilities/194963
CVE: CVE-2020-5427
Published: 2021-01-27
Description: In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://tanzu.vmware.com/security/cve-2020-5427; https://tanzu.vmware.com/security/cve-2020-5427
CVE: CVE-2020-5428
Published: 2021-01-27
Description: In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://tanzu.vmware.com/security/cve-2020-5428; https://tanzu.vmware.com/security/cve-2020-5428
CVE: CVE-2021-3318
Published: 2021-01-27
Description: attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html; https://github.com/zyx0814/dzzoffice/issues/173; http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html
CVE: CVE-2021-25224
Published: 2021-01-27
Description: A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://success.trendmicro.com/solution/000284207; https://www.zerodayinitiative.com/advisories/ZDI-21-085/; https://success.trendmicro.com/solution/000284207
CVE: CVE-2021-25225
Published: 2021-01-27
Description: A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://success.trendmicro.com/solution/000284207; https://www.zerodayinitiative.com/advisories/ZDI-21-086/; https://success.trendmicro.com/solution/000284207
CVE: CVE-2021-25226
Published: 2021-01-27
Description: A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://success.trendmicro.com/solution/000284207; https://www.zerodayinitiative.com/advisories/ZDI-21-087/; https://success.trendmicro.com/solution/000284207
CVE: CVE-2021-25247
Published: 2021-01-27
Description: A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-10180; https://helpcenter.trendmicro.com/en-us/article/TMKA-10180
CVE: CVE-2021-26117
Published: 2021-01-27
Description: The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://lists.apache.org/thread.html/r110cacfa[PII_REDACTED]34965ffe851a046e302ff2693b055f49f47b02%40%3Cissues.activemq.apache.org%3E; https://lists.apache.org/thread.html/r22cdc0fb45e223ac92bc2ceff7af92f1193dfc614c8b[PII_REDACTED]29%40%3Cissues.activemq.apache.org%3E; https://lists.apache.org/thread.html/r3341d96d8f956e878fb7b463b08d57ca1d58fec9c970aee929b58e0d%40%3Cissues.activemq.apache.org%3E
CVE: CVE-2021-26118
Published: 2021-01-27
Description: While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://lists.apache.org/thread.html/rafd5d7cf303772a[PII_REDACTED]946586921a65ebd98fc24f56c812574%40%3Cannounce.apache.org%3E; https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%40mail.gmail.com%3E; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-3325
Published: 2021-01-27
Description: Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4a; https://github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1; https://github.com/mikaku/Monitorix/issues/309
CVE: CVE-2021-22637
Published: 2021-01-27
Description: Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01; https://www.zerodayinitiative.com/advisories/ZDI-21-097/; https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE: CVE-2021-22639
Published: 2021-01-27
Description: An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01; https://www.zerodayinitiative.com/advisories/ZDI-21-098/; https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE: CVE-2021-22641
Published: 2021-01-27
Description: A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01; https://www.zerodayinitiative.com/advisories/ZDI-21-099/; https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE: CVE-2021-22653
Published: 2021-01-27
Description: Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01; https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE: CVE-2021-22655
Published: 2021-01-27
Description: Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01; https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE: CVE-2021-26276
Published: 2021-01-27
Description: scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-913
References: https://advisory.checkmarx.net/advisory/CX-2021-4773; https://github.com/godaddy/node-config-shield/commit/cdba5d3a7accd661ffbc52e208153464bd0d9da6; https://advisory.checkmarx.net/advisory/CX-2021-4773
CVE: CVE-2021-3326
Published: 2021-01-27
Description: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: http://www.openwall.com/lists/oss-security/2021/01/28/2; https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://security.gentoo.org/glsa/202107-07
CVE: CVE-2021-3331
Published: 2021-01-27
Description: WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs.)
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/winscp/winscp/commit/faa96e8144e6925a380f94a97aa382c9427f688d; https://winscp.net/eng/docs/history#5.17.10; https://winscp.net/eng/docs/rawsettings
CVE: CVE-2020-0237
Published: 2021-01-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-26067
Published: 2021-01-28
Description: Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions are before version 7.2.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://jira.atlassian.com/browse/BAM-21215; https://jira.atlassian.com/browse/BAM-21215
CVE: CVE-2020-25782
Published: 2021-01-28
Description: An issue was discovered on Accfly Wireless Security IR Camera 720P System with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CNetClientManage::ServerIP_Proto_Set during incoming message handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/tezeb/accfly/blob/master/Readme.md; https://github.com/tezeb/accfly/blob/master/Readme.md
CVE: CVE-2020-25783
Published: 2021-01-28
Description: An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated heap-based buffer overflow in the function CNetClientTalk::OprMsg during incoming message handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/tezeb/accfly/blob/master/Readme.md; https://github.com/tezeb/accfly/blob/master/Readme.md
CVE: CVE-2020-25784
Published: 2021-01-28
Description: An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CNetClientGuard::SubOprMsg during incoming message handling.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/tezeb/accfly/blob/master/Readme.md; https://github.com/tezeb/accfly/blob/master/Readme.md
CVE: CVE-2020-25785
Published: 2021-01-28
Description: An issue was discovered on Accfly Wireless Security IR Camera System 720P with software versions v3.10.73 through v4.15.77. There is an unauthenticated stack-based buffer overflow in the function CFtpProtocol::FtpLogin during the update procedure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/tezeb/accfly/blob/master/Readme.md; https://github.com/tezeb/accfly/blob/master/Readme.md
CVE: CVE-2020-35124
Published: 2021-01-28
Description: A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://forum.mautic.org/c/announcements/16; https://github.com/mautic/mautic/security/advisories/GHSA-39wj-j3jc-858m; https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce
CVE: CVE-2021-3142
Published: 2021-01-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-35128. Reason: This candidate is a reservation duplicate of CVE-2020-35128. Notes: All CVE users should reference CVE-2020-35128 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-5626
Published: 2021-01-28
Description: Logstorage version 8.0.0 and earlier, and ELC Analytics version 3.0.0 and earlier allow remote attackers to execute arbitrary OS commands via a specially crafted log file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN41853173/index.html; https://www.logstorage.com/support/vulnerability_info.html#jvn-41853173; https://jvn.jp/en/jp/JVN41853173/index.html
CVE: CVE-2021-20620
Published: 2021-01-28
Description: Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jpn.nec.com/security-info/secinfo/nv21-005.html; https://jvn.jp/en/jp/JVN38248512/index.html; https://www.aterm.jp/support/tech/2019/0328.html
CVE: CVE-2021-20621
Published: 2021-01-28
Description: Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jpn.nec.com/security-info/secinfo/nv21-005.html; https://jvn.jp/en/jp/JVN38248512/index.html; https://www.aterm.jp/support/tech/2019/0328.html
CVE: CVE-2021-20622
Published: 2021-01-28
Description: Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jpn.nec.com/security-info/secinfo/nv21-005.html; https://jvn.jp/en/jp/JVN38248512/index.html; https://www.aterm.jp/support/tech/2019/0328.html
CVE: CVE-2020-13569
Published: 2021-01-28
Description: A cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and development version 6.0.0 (commit babec93f600ff1394f91ccd512bcad85832eb6ce). A specially crafted HTTP request can lead to the execution of arbitrary requests in the context of the victim. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1180; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1180
CVE: CVE-2020-4682
Published: 2021-01-28
Description: IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/186509; https://www.ibm.com/support/pages/node/6408626; https://exchange.xforce.ibmcloud.com/vulnerabilities/186509
CVE: CVE-2020-4888
Published: 2021-01-28
Description: IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190912; https://www.ibm.com/support/pages/node/6409306; https://exchange.xforce.ibmcloud.com/vulnerabilities/190912
CVE: CVE-2021-22874
Published: 2021-01-28
Description: Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/revive-adserver/revive-adserver/commit/e2a67ce8; https://hackerone.com/reports/1083231; https://www.revive-adserver.com/security/revive-sa-2021-002/
CVE: CVE-2021-22875
Published: 2021-01-28
Description: Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/revive-adserver/revive-adserver/commit/6f46076a; https://hackerone.com/reports/1083376; https://www.revive-adserver.com/security/revive-sa-2021-002/
CVE: CVE-2020-26272
Published: 2021-01-28
Description: The Electron framework lets users write cross-platform desktop applications using JavaScript, HTML and CSS. In versions of Electron IPC prior to 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9, messages sent from the main process to a subframe in the renderer process, through webContents.sendToFrame, event.reply or when using the remote module, can in some cases be delivered to the wrong frame. If your app uses remote, calls webContents.sendToFrame, or calls event.reply in an IPC message handler then it is impacted by this issue. This has been fixed in versions 9.4.0, 10.2.0, 11.1.0, and 12.0.0-beta.9. There are no known workarounds for this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-668
References: https://github.com/electron/electron/commit/07a1c2a3e5845901f7e2eda9506695be58edc73c; https://github.com/electron/electron/commit/0bbd268eb4caf35604443df5ff196980dd49e208; https://github.com/electron/electron/commit/36c695ce2a7e22c07fe1e30c61c00d20371daee2
CVE: CVE-2021-20183
Published: 2021-01-28
Description: It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://moodle.org/mod/forum/discuss.php?d=417166; https://moodle.org/mod/forum/discuss.php?d=417166
CVE: CVE-2021-20184
Published: 2021-01-28
Description: It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-354
References: https://moodle.org/mod/forum/discuss.php?d=417167; https://moodle.org/mod/forum/discuss.php?d=417167
CVE: CVE-2021-20186
Published: 2021-01-28
Description: It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://moodle.org/mod/forum/discuss.php?d=417170; https://moodle.org/mod/forum/discuss.php?d=417170
CVE: CVE-2021-20187
Published: 2021-01-28
Description: It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-829
References: https://moodle.org/mod/forum/discuss.php?d=417171; https://moodle.org/mod/forum/discuss.php?d=417171
CVE: CVE-2021-25647
Published: 2021-01-28
Description: Mobile application "Testes de Codigo" v11.3 and prior allows stored XSS by injecting a payload in the "feedback" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the "feedback list", either by accessing the website directly or using the mobile application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://vrls.ws/posts/2021/01/cve-2021-25647-mobile-application-testes-de-codigo-stored-xss/; https://vrls.ws/posts/2021/01/cve-2021-25647-mobile-application-testes-de-codigo-stored-xss/
CVE: CVE-2019-25016
Published: 2021-01-28
Description: In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-459, CWE-909
References: https://github.com/Duncaen/OpenDoas/commit/01c658f8c45cb92a343be5f32aa6da70b2032168; https://github.com/Duncaen/OpenDoas/commit/d5acd52e2a15c36a8e06f9103d35622933aa422d; https://github.com/Duncaen/OpenDoas/issues/45
CVE: CVE-2020-1723
Published: 2021-01-28
Description: A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://bugzilla.redhat.com/show_bug.cgi?id=1770276; https://issues.redhat.com/browse/KEYCLOAK-11318; https://bugzilla.redhat.com/show_bug.cgi?id=1770276
CVE: CVE-2020-1725
Published: 2021-01-28
Description: A flaw was found in keycloak before version 13.0.0. In some scenarios a user still has access to a resource after changing the role mappings in Keycloak and after expiration of the previous access token.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1765129; https://issues.redhat.com/browse/KEYCLOAK-16550; https://bugzilla.redhat.com/show_bug.cgi?id=1765129