deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-9525
Published: 2017-06-09
Description: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/864466; http://www.openwall.com/lists/oss-security/2017/06/08/3; http://www.securitytracker.com/id/1038651
CVE: CVE-2017-0375
Published: 2017-06-09
Description: The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.securityfocus.com/bid/99017; https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7; https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html
CVE: CVE-2017-0376
Published: 2017-06-09
Description: The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.debian.org/security/2017/dsa-3877; https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd; https://lists.torproject.org/pipermail/tor-announce/2017-June/000131.html
CVE: CVE-2017-5003
Published: 2017-06-09
Description: EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Reflected Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/540693/30/0/threaded; http://www.securityfocus.com/bid/98974; http://www.securitytracker.com/id/1038648
CVE: CVE-2017-5004
Published: 2017-06-09
Description: EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance version 7.0 (all patch levels); and RSA Identity Management and Governance (IMG) version 6.9.1 (all patch levels) have Stored Cross Site Scripting vulnerabilities that could potentially be exploited by malicious users to compromise an affected system.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/540693/30/0/threaded; http://www.securityfocus.com/bid/98968; http://www.securitytracker.com/id/1038648
CVE: CVE-2017-9526
Published: 2017-06-11
Description: In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.debian.org/security/2017/dsa-3880; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html; http://www.securityfocus.com/bid/99046
CVE: CVE-2017-9527
Published: 2017-06-11
Description: The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based use-after-free and application crash) or possibly have unspecified other impact via a crafted .rb file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://github.com/mruby/mruby/commit/5c114c91d4ff31859fcd84cf8bf349b737b90d99; https://github.com/mruby/mruby/issues/3486; https://lists.debian.org/debian-lts-announce/2022/05/msg00006.html
CVE: CVE-2017-9542
Published: 2017-06-11
Description: D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/98992; https://twitter.com/tiger_tigerboy/status/[PII_REDACTED]21220609; https://www.facebook.com/tigerBOY777/videos/[PII_REDACTED]/
CVE: CVE-2017-8834
Published: 2017-06-12
Description: The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html; http://www.openwall.com/lists/oss-security/2020/08/13/3; https://bugzilla.gnome.org/show_bug.cgi?id=782647
CVE: CVE-2017-8871
Published: 2017-06-12
Description: The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html; http://www.openwall.com/lists/oss-security/2020/08/13/3; https://bugzilla.gnome.org/show_bug.cgi?id=782649
CVE: CVE-2017-9122
Published: 2017-06-12
Description: The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9123
Published: 2017-06-12
Description: The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9124
Published: 2017-06-12
Description: The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9125
Published: 2017-06-12
Description: The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9126
Published: 2017-06-12
Description: The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9127
Published: 2017-06-12
Description: The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9128
Published: 2017-06-12
Description: The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://usn.ubuntu.com/4545-1/; https://www.exploit-db.com/exploits/42148/; https://usn.ubuntu.com/4545-1/
CVE: CVE-2017-9324
Published: 2017-06-12
Description: In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URLs in question contain index.pl?Action=Installer with ;Subaction=Intro or ;Subaction=Start or ;Subaction=System appended at the end.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: http://www.debian.org/security/2017/dsa-3876; https://packetstormsecurity.com/files/142862/OTRS-Install-Dialog-Disclosure.html; https://www.otrs.com/security-advisory-2017-03-security-update-otrs-versions/
CVE: CVE-2017-9543
Published: 2017-06-12
Description: register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://www.exploit-db.com/exploits/42154/; https://www.exploit-db.com/exploits/42154/
CVE: CVE-2017-9544
Published: 2017-06-12
Description: There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.exploit-db.com/exploits/42155/; https://www.exploit-db.com/exploits/42155/
CVE: CVE-2017-9546
Published: 2017-06-12
Description: admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigtreecms/BigTree-CMS/issues/298; https://github.com/bigtreecms/BigTree-CMS/issues/298
CVE: CVE-2017-9547
Published: 2017-06-12
Description: admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigtreecms/BigTree-CMS/issues/297; https://github.com/bigtreecms/BigTree-CMS/issues/297
CVE: CVE-2017-9548
Published: 2017-06-12
Description: admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication (aka a pending page change).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigtreecms/BigTree-CMS/issues/296; https://github.com/bigtreecms/BigTree-CMS/issues/296
CVE: CVE-2014-9984
Published: 2017-06-12
Description: nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the size of an internal buffer when processing netgroup requests, possibly leading to an nscd daemon crash or code execution as the user running nscd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html; http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html; http://seclists.org/fulldisclosure/2019/Jun/18
CVE: CVE-2017-9418
Published: 2017-06-12
Description: SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute arbitrary SQL commands via the testid parameter to wp-admin/admin.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpvulndb.com/vulnerabilities/8845; https://www.exploit-db.com/exploits/42166/; https://wpvulndb.com/vulnerabilities/8845
CVE: CVE-2017-9557
Published: 2017-06-12
Description: register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://www.exploit-db.com/exploits/42153/; https://www.exploit-db.com/exploits/42153/
CVE: CVE-2017-6892
Published: 2017-06-12
Description: In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://github.com/erikd/libsndfile/commit/f833c53cb596e9e1792949f762e0b[PII_REDACTED]8; https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html; https://secuniaresearch.flexerasoftware.com/advisories/76717/
CVE: CVE-2017-7665
Published: 2017-06-12
Description: In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/99009; https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E; http://www.securityfocus.com/bid/99009
CVE: CVE-2017-7667
Published: 2017-06-12
Description: Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: http://www.securityfocus.com/bid/99018; https://lists.apache.org/thread.html/d779d6129de1a5aa149c219b2fc6e9e78156614eaac92a89cbaf9bce%40%3Cdev.nifi.apache.org%3E; http://www.securityfocus.com/bid/99018
CVE: CVE-2017-1214
Published: 2017-06-12
Description: IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22002015; http://www.securitytracker.com/id/1038654; https://exchange.xforce.ibmcloud.com/vulnerabilities/123854
CVE: CVE-2017-1247
Published: 2017-06-12
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124627.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22002809; http://www.securityfocus.com/bid/99002; https://exchange.xforce.ibmcloud.com/vulnerabilities/124627
CVE: CVE-2017-1276
Published: 2017-06-12
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124751.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22002809; http://www.securityfocus.com/bid/99000; https://exchange.xforce.ibmcloud.com/vulnerabilities/124751
CVE: CVE-2017-1278
Published: 2017-06-12
Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22002809; http://www.securityfocus.com/bid/98994; https://exchange.xforce.ibmcloud.com/vulnerabilities/124756
CVE: CVE-2015-9096
Published: 2017-06-12
Description: Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://www.mbsd.jp/Whitepaper/smtpi.pdf; https://github.com/ruby/ruby/commit/0827a7e52ba3d957a634b063bf5a391239b9ffee; https://github.com/rubysec/ruby-advisory-db/issues/215
CVE: CVE-2015-9097
Published: 2017-06-12
Description: The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-93
References: http://openwall.com/lists/oss-security/2015/12/11/3; http://www.mbsd.jp/Whitepaper/smtpi.pdf; https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83
CVE: CVE-2016-6655
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.securityfocus.com/bid/93889; https://www.cloudfoundry.org/cve-2016-6655/; http://www.securityfocus.com/bid/93889
CVE: CVE-2016-8218
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.cloudfoundry.org/cve-2016-8218/; https://www.cloudfoundry.org/cve-2016-8218/
CVE: CVE-2016-8219
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability to restage applications. This could cause application downtime if the restage fails.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://www.cloudfoundry.org/cve-2016-8219/; https://www.cloudfoundry.org/cve-2016-8219/
CVE: CVE-2017-2773
Published: 2017-06-13
Description: An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/97135; https://pivotal.io/security/cve-2017-2773; http://www.securityfocus.com/bid/97135
CVE: CVE-2017-4955
Published: 2017-06-13
Description: An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: http://www.securityfocus.com/bid/97082; https://pivotal.io/security/cve-2017-4955; http://www.securityfocus.com/bid/97082
CVE: CVE-2017-4959
Published: 2017-06-13
Description: An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. Pivotal Cloud Foundry deployments using the Pivotal Account application are vulnerable to a flaw which allows an authorized user to take over the account of another user, causing account lockout and potential escalation of privileges.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/96218; https://pivotal.io/security/cve-2017-4959; http://www.securityfocus.com/bid/96218
CVE: CVE-2017-4961
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their privileges on the Director VM, aka "BOSH Director Shell Injection Vulnerabilities."
CVSS Score: 8.8 (HIGH)
CWE: CWE-354
References: https://www.cloudfoundry.org/cve-2017-4961/; https://www.cloudfoundry.org/cve-2017-4961/
CVE: CVE-2017-4963
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier versions. UAA is vulnerable to session fixation when configured to authenticate against external SAML or OpenID Connect based identity providers.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384
References: https://www.cloudfoundry.org/cve-2017-4963/; https://www.cloudfoundry.org/cve-2017-4963/
CVE: CVE-2017-4965
Published: 2017-06-13
Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98394; https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html; https://pivotal.io/security/cve-2017-4965
CVE: CVE-2017-4966
Published: 2017-06-13
Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. RabbitMQ management UI stores signed-in user credentials in a browser's local storage without expiration, making it possible to retrieve them using a chained attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html; https://pivotal.io/security/cve-2017-4966; https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
CVE: CVE-2017-4967
Published: 2017-06-13
Description: An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html; https://pivotal.io/security/cve-2017-4965; https://lists.debian.org/debian-lts-announce/2021/07/msg00011.html
CVE: CVE-2017-4970
Published: 2017-06-13
Description: An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes the Staticfile.auth configuration to be ignored when the Static file file is not present in the application root. Applications containing a Staticfile.auth file but not a Static file had their basic auth turned off when an operator upgraded the Static file build pack in the foundation to one of the vulnerable versions. Note that Static file applications without a Static file are technically misconfigured, and will not successfully detect unless the Static file build pack is explicitly specified.
CVSS Score: 5.9 (MEDIUM)
References: https://www.cloudfoundry.org/cve-2017-4970/; https://www.cloudfoundry.org/cve-2017-4970/