deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-13855
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app that triggers type confusion.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-704
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13856
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102181; http://www.securitytracker.com/id/1040012; http://www.securitytracker.com/id/1040013
CVE: CVE-2017-13858
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039966; https://support.apple.com/HT208331
CVE: CVE-2017-13860
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle attackers to read e-mail content by leveraging mishandling of S/MIME credential encryption.
CVSS Score: 5.9 (MEDIUM)
References: http://www.securityfocus.com/bid/102097; http://www.securitytracker.com/id/1039953; http://www.securitytracker.com/id/1039966
CVE: CVE-2017-13861
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/153148/Safari-Webkit-Proxy-Object-Type-Confusion.html; http://www.securityfocus.com/bid/102134; http://www.securitytracker.com/id/1039952
CVE: CVE-2017-13862
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13864
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102192; http://www.securitytracker.com/id/1040013; https://support.apple.com/HT208326
CVE: CVE-2017-13865
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13866
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102181; http://www.securitytracker.com/id/1040012; http://www.securitytracker.com/id/1040013
CVE: CVE-2017-13867
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13868
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13869
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13870
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102181; http://www.securitytracker.com/id/1040012; http://www.securitytracker.com/id/1040013
CVE: CVE-2017-13871
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Mail" component. It allows remote attackers to read cleartext e-mail content (for which S/MIME encryption was intended) by leveraging the lack of installation of an S/MIME certificate by the recipient.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039966; https://support.apple.com/HT208331
CVE: CVE-2017-13874
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail" component. It might allow remote attackers to bypass an intended encryption protection mechanism by leveraging incorrect S/MIME certificate selection.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/102097; http://www.securitytracker.com/id/1039953; https://support.apple.com/HT208334
CVE: CVE-2017-13875
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039966; https://support.apple.com/HT208331
CVE: CVE-2017-13876
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102100; http://www.securitytracker.com/id/1039952; http://www.securitytracker.com/id/1039953
CVE: CVE-2017-13878
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039966; https://support.apple.com/HT208331
CVE: CVE-2017-13879
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "IOMobileFrameBuffer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102097; http://www.securitytracker.com/id/1039953; https://support.apple.com/HT208334
CVE: CVE-2017-13883
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/102099; http://www.securitytracker.com/id/1039966; https://support.apple.com/HT208331
CVE: CVE-2017-13903
Published: 2017-12-25
Description: An issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11.2.1 is affected. The issue involves the "HomeKit" component. It allows remote attackers to modify the application state by leveraging incorrect message handling, as demonstrated by use of an Apple Watch to obtain an encryption key and unlock a door.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/102182; http://www.securitytracker.com/id/1040008; https://support.apple.com/HT208357
CVE: CVE-2017-12736
Published: 2017-12-26
Description: After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1188, CWE-665
References: http://www.securityfocus.com/bid/101041; http://www.securitytracker.com/id/1039463; http://www.securitytracker.com/id/1039464
CVE: CVE-2017-12740
Published: 2017-12-26
Description: Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while performing a Man-in-the-Middle (MitM) attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-494, CWE-345
References: https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf; https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-888929.pdf
CVE: CVE-2017-12741
Published: 2017-12-26
Description: Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://cert-portal.siemens.com/productcert/html/ssa-141614.html; https://cert-portal.siemens.com/productcert/html/ssa-346262.html; https://cert-portal.siemens.com/productcert/html/ssa-546832.html
CVE: CVE-2017-1191
Published: 2017-12-27
Description: An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
CVSS Score: 4.3 (MEDIUM)
References: http://www.ibm.com/support/docview.wss?uid=swg22011815; https://exchange.xforce.ibmcloud.com/vulnerabilities/123661; http://www.ibm.com/support/docview.wss?uid=swg22011815
CVE: CVE-2017-1365
Published: 2017-12-27
Description: IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg22011815; https://exchange.xforce.ibmcloud.com/vulnerabilities/126858; http://www.ibm.com/support/docview.wss?uid=swg22011815
CVE: CVE-2017-16897
Published: 2017-12-27
Description: A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response (e.g., only signs the assertion within the response).
CVSS Score: 8.1 (HIGH)
CWE: CWE-290
References: https://auth0.com/docs/security/bulletins/cve-2017-16897; https://auth0.com/docs/security/bulletins/cve-2017-16897
CVE: CVE-2017-1698
Published: 2017-12-27
Description: IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the system. IBM X-Force ID: 124390.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22011519; http://www.securityfocus.com/bid/102281; http://www.securitytracker.com/id/1040043
CVE: CVE-2017-16995
Published: 2017-12-27
Description: The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c[PII_REDACTED]91f8f2a4f32fce1ac6f; http://openwall.com/lists/oss-security/2017/12/21/2; http://www.securityfocus.com/bid/102288
CVE: CVE-2017-16996
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958; http://openwall.com/lists/oss-security/2017/12/21/2; http://www.securityfocus.com/bid/102267
CVE: CVE-2017-17010
Published: 2017-12-27
Description: Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://jvn.jp/en/jp/JVN95423049/index.html; https://jvn.jp/en/jp/JVN95423049/index.html
CVE: CVE-2017-17832
Published: 2017-12-27
Description: ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, and JavaScript can be executed on settings-save.html (the Settings - SMS Alerts page).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/145517/ServersCheck-Monitoring-Software-Cross-Site-Scripting.html; https://serverscheck.com/monitoring-software/release.asp; http://packetstormsecurity.com/files/145517/ServersCheck-Monitoring-Software-Cross-Site-Scripting.html
CVE: CVE-2017-17840
Published: 2017-12-27
Description: An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages with incorrect lengths, which (due to lack of checking) can lead to buffer overflows, and result in aborts (with overflow checking enabled) or code execution. The process_iscsid_broadcast function in iscsiuio/src/unix/iscsid_ipc.c does not validate the payload length before a write operation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2017/12/13/2; https://bugzilla.opensuse.org/show_bug.cgi?id=1072312; http://www.openwall.com/lists/oss-security/2017/12/13/2
CVE: CVE-2017-17843
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regular expressions are used for extraction of an e-mail address from a comma-separated list, as demonstrated by a modified Full Name field and a homograph attack, aka TBE-01-002.
CVSS Score: 5.9 (MEDIUM)
References: https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf; https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html; https://lists.debian.org/debian-security-announce/2017/msg00333.html
CVE: CVE-2017-17844
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot directly decrypt) to a victim, and relying on the victim to automatically decrypt that block and then send it back to the attacker as quoted text, aka the TBE-01-005 "replay" issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf; https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html; https://lists.debian.org/debian-security-announce/2017/msg00333.html
CVE: CVE-2017-17845
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-01-001.
CVSS Score: 7.3 (HIGH)
CWE: CWE-338
References: https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf; https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html; https://lists.debian.org/debian-security-announce/2017/msg00333.html
CVE: CVE-2017-17846
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long strings, aka TBE-01-003.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf; https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html; https://lists.debian.org/debian-security-announce/2017/msg00333.html
CVE: CVE-2017-17847
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an attachment signature, and a signature that applies to the entire containing message, aka TBE-01-021. This is demonstrated by an e-mail message with an attachment that is a signed e-mail message in message/rfc822 format.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://enigmail.net/download/other/Enigmail%20Pentest%20Report%20by%20Cure53%20-%20Excerpt.pdf; https://lists.debian.org/debian-lts-announce/2017/12/msg00021.html; https://lists.debian.org/debian-security-announce/2017/msg00333.html
CVE: CVE-2017-17848
Published: 2017-12-27
Description: An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messages because a signed message part can be referenced with a cid: URI but not actually displayed. In other words, the entire containing message appears to be signed, but the recipient does not see any of the signed text.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html; http://seclists.org/fulldisclosure/2019/Apr/38; http://www.openwall.com/lists/oss-security/2019/04/30/4
CVE: CVE-2017-17849
Published: 2017-12-27
Description: A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://packetstormsecurity.com/files/145530/GetGo-Download-Manager-5.3.0.2712-Buffer-Overflow.html; https://www.exploit-db.com/exploits/43391/; https://www.exploit-db.com/exploits/45087/
CVE: CVE-2017-17850
Published: 2017-12-27
Description: An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel driver was used, Asterisk would crash. The severity of this vulnerability is somewhat mitigated if authentication is enabled. If authentication is enabled, a user would have to first be authorized before reaching the crash point.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://downloads.asterisk.org/pub/security/AST-2017-014.html; http://www.securitytracker.com/id/1040056; https://issues.asterisk.org/jira/browse/ASTERISK-27480
CVE: CVE-2017-17852
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=468f6eafa6c44cb2c5d8aad35e12f06c240a812a; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/468f6eafa6c44cb2c5d8aad35e12f06c240a812a
CVE: CVE-2017-17853
Published: 2017-12-27
Description: kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect BPF_RSH signed bounds calculations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4374f256ce[PII_REDACTED]c0c639bb8d0695b4c941; http://www.openwall.com/lists/oss-security/2017/12/21/2; https://github.com/torvalds/linux/commit/4374f256ce[PII_REDACTED]c0c639bb8d0695b4c941