deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-6623
Published: 2018-03-12
Description: An issue was discovered in Hola 1.79.859. An unprivileged user could modify or overwrite the executable with arbitrary code, which would be executed the next time the service is started. Depending on the user that the service runs as, this could result in privilege escalation. The issue exists because of the SERVICE_ALL_ACCESS access right for the hola_svc and hola_updater services.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2018/Mar/23; http://seclists.org/fulldisclosure/2018/Mar/23
CVE: CVE-2018-7538
Published: 2018-03-12
Description: A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2018/Mar/20; https://github.com/cmaruti/reports/blob/master/tuleap.pdf; https://tuleap.net/plugins/tracker/?aid=11192
CVE: CVE-2018-7562
Published: 2018-03-12
Description: A remote code execution issue was discovered in GLPI through 9.2.1. There is a race condition that allows temporary access to an uploaded executable file that will be disallowed. The application allows an authenticated user to upload a file when he/she creates a new ticket via front/fileupload.php. This feature is protected using different types of security features like the check on the file's extension. However, the application uploads and creates a file, though this file is not allowed, and then deletes the file in the uploadFiles method in inc/glpiuploaderhandler.class.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362, CWE-434
References: https://github.com/glpi-project/glpi/pull/3650; https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/; https://github.com/glpi-project/glpi/pull/3650
CVE: CVE-2018-7563
Published: 2018-03-12
Description: An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/pull/3647; https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/; https://github.com/glpi-project/glpi/pull/3647
CVE: CVE-2018-7858
Published: 2018-03-12
Description: Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html; http://www.openwall.com/lists/oss-security/2018/03/09/1; http://www.securityfocus.com/bid/103350
CVE: CVE-2017-18228
Published: 2018-03-12
Description: Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://communities.bmc.com/thread/164169; https://communities.bmc.com/thread/164169
CVE: CVE-2018-8086
Published: 2018-03-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://dev.cmsmadesimple.org/bug/view/11741; https://www.exploit-db.com/exploits/44976/; http://dev.cmsmadesimple.org/bug/view/11741
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: oVirt version 4.2.0 to 4.2.2 contains a Cross Site Scripting (XSS) vulnerability in the name/description of VMs portion of the web admin application. This vulnerability appears to have been fixed in version 4.2.3.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://gerrit.ovirt.org/#/c/87265/2/frontend/webadmin/modules/webadmin/src/main/java/org/ovirt/engine/ui/webadmin/widget/host/HostNetworkInterfaceListViewItem.java; https://gerrit.ovirt.org/c/87265/; https://gerrit.ovirt.org/#/c/87265/2/frontend/webadmin/modules/webadmin/src/main/java/org/ovirt/engine/ui/webadmin/widget/host/HostNetworkInterfaceListViewItem.java
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: brianleroux tiny-json-http version all versions since commit 9b8e74a232bba4701844e07bcba794173b0238a8 (Oct 29 2016) contains a Missing SSL certificate validation vulnerability in The libraries core functionality is affected. that can result in Exposes the user to man-in-the-middle attacks.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://github.com/brianleroux/tiny-json-http/pull/15; https://github.com/brianleroux/tiny-json-http/pull/15
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Sharutils sharutils (unshar command) version 4.15.2 contains a Buffer Overflow vulnerability in Affected component on the file unshar.c at line 75, function looks_like_c_code. Failure to perform checking of the buffer containing input line. that can result in Could lead to code execution. This attack appear to be exploitable via Victim have to run unshar command on a specially crafted file..
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://seclists.org/bugtraq/2018/Feb/54; https://usn.ubuntu.com/3605-1/; https://www.debian.org/security/2018/dsa-4167
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://trac.pjsip.org/repos/milestone/release-2.7.2; https://trac.pjsip.org/repos/ticket/2093; https://www.debian.org/security/2018/dsa-4170
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824
References: https://trac.pjsip.org/repos/milestone/release-2.7.2; https://trac.pjsip.org/repos/ticket/2092; https://trac.pjsip.org/repos/ticket/2094
CVE: CVE-2018-8087
Published: 2018-03-13
Description: Memory leak in the hwsim_new_radio_nl function in drivers/net/wireless/mac80211_hwsim.c in the Linux kernel through 4.15.9 allows local users to cause a denial of service (memory consumption) by triggering an out-of-array error case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-772
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0ddcff49b672239dda94d70d0fcf50317a9f4b51; http://www.securityfocus.com/bid/103397; https://access.redhat.com/errata/RHSA-2019:2029
CVE: CVE-2018-8078
Published: 2018-03-13
Description: YzmCMS 3.7 has Stored XSS via the title parameter to advertisement/adver/edit.html.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/AlwaysHereFight/YZMCMSxss/blob/master/README.md; https://github.com/AlwaysHereFight/YZMCMSxss/blob/master/README.md
CVE: CVE-2016-9575
Published: 2018-03-13
Description: Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863, CWE-285
References: http://rhn.redhat.com/errata/RHSA-2017-0001.html; http://www.securityfocus.com/bid/95068; https://bugzilla.redhat.com/show_bug.cgi?id=1395311
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2[PII_REDACTED]. Reason: This candidate is a reservation duplicate of CVE-2[PII_REDACTED]. Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: A plaintext storage of a password vulnerability exists in Jenkins Coverity Plugin 1.10.0 and earlier in CIMInstance.java that allows an attacker with local file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured keystore and private key passwords.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-260; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-260
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to retrieve some configuration information about Gerrit in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-402; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-402
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Gerrit Trigger Plugin 2.27.4 and earlier in GerritManagement.java, GerritServer.java, and PluginImpl.java that allows an attacker with Overall/Read access to modify the Gerrit configuration in Jenkins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-403; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-403
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-498; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-498
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: A cross-site scripting vulnerability exists in Jenkins CppNCSS Plugin 1.1 and earlier in AbstractProjectAction/index.jelly that allow an attacker to craft links to Jenkins URLs that run arbitrary JavaScript in the user's browser when accessed.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-712; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-712
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Google Play Android Publisher Plugin version 1.6 and earlier in GooglePlayBuildStepDescriptor.java that allow an attacker to obtain credential IDs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-715
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Git Plugin version 3.7.0 and earlier in GitStatus.java that allows an attacker with network access to obtain a list of nodes and users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-723; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-723
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-724; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-724
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier in MercurialStatus.java that allows an attacker with network access to obtain a list of nodes and users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-726; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-726
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker who can control e.g. TestLink report names to have Jenkins serve arbitrary HTML and JavaScript
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-731; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-731
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746; https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: FreePlane version 1.5.9 and earlier contains a XML External Entity (XXE) vulnerability in XML Parser in mindmap loader that can result in stealing data from victim's machine. This attack appears to require the victim to open a specially crafted mind map file. This vulnerability appears to have been fixed in 1.6+.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://lists.debian.org/debian-lts-announce/2018/03/msg00019.html; https://www.debian.org/security/2018/dsa-4175; https://www.freeplane.org/wiki/index.php/XML_External_Entity_vulnerability_in_map_parser
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0) contains a Eval injection vulnerability in main program, file src/messagetypes/__init__.py function constructObject that can result in Code Execution. This attack appears to be exploitable via remote attacker using a malformed message which must be processed by the victim - e.g. arrive from any sender on bitmessage network. This vulnerability appears to have been fixed in v0.6.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/Bitmessage/PyBitmessage/commit/3a8016d31f517775d226aa8b902480f4a3a148a9#comments; https://github.com/Bitmessage/PyBitmessage/commit/3a8016d31f517775d226aa8b902480f4a3a148a9#comments
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: roundcube version 1.3.4 and earlier contains an Insecure Permissions vulnerability in enigma plugin that can result in exfiltration of gpg private key. This attack appear to be exploitable via network connectivity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/roundcube/roundcubemail/issues/6173; https://www.legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt; https://github.com/roundcube/roundcubemail/issues/6173
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: iRedMail version prior to commit f04b8ef contains a Insecure Permissions vulnerability in Roundcube Webmail that can result in Exfiltrate a user's password protected secret GPG key file and other important configuration files.. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in Beta: 0.9.8-BETA1, Stable: 0.9.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: http://legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt; https://bitbucket.org/zhb/iredmail/issues/130/multiple-security-issues-with-default; http://legacysecuritygroup.com/cve/references/02122018-roundcube-enigma.txt
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in install_location function of package.rb that can result in path traversal when writing to a symlinked basedir outside of the root. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Deserialization of Untrusted Data vulnerability in owner command that can result in code execution. This attack appear to be exploitable via victim must run the `gem owner` command on a gem with a specially crafted YAML file. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can result in a negative size could cause an infinite loop.. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Verification of Cryptographic Signature vulnerability in package.rb that can result in a mis-signed gem could be installed, as the tarball would contain multiple gem signatures.. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Improper Input Validation vulnerability in ruby gems specification homepage attribute that can result in a malicious gem could set an invalid homepage URL. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Cross Site Scripting (XSS) vulnerability in gem server display of homepage attribute that can result in XSS. This attack appear to be exploitable via the victim must browse to a malicious gem on a vulnerable gem server. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to arbitrary filesystem locations during installation. This attack appear to be exploitable via the victim must install a malicious gem. This vulnerability appears to have been fixed in 2.7.6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://blog.rubygems.org/2018/02/15/2.7.6-released.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00036.html; https://access.redhat.com/errata/RHSA-2018:3729
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable via By knowing how the requisition is made, and sending it as a normal user, the server, in response, downloads the plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee; https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can freeze te server by sending a giant string to the ID parameter ..
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee; https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee
CVE: CVE-2[PII_REDACTED]
Published: 2018-03-13
Description: Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed..
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee; https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee