deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-2505
Published: 2020-12-24
Description: If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later.
CVSS Score: 2.3 (LOW)
CWE: CWE-209, CWE-755, CWE-209
References: https://www.qnap.com/zh-tw/security-advisory/qsa-20-17; https://www.qnap.com/zh-tw/security-advisory/qsa-20-17
CVE: CVE-2020-5681
Published: 2020-12-24
Description: Untrusted search path vulnerability in self-extracting files created by EpsonNet SetupManager versions 2.2.14 and earlier, and Offirio SynergyWare PrintDirector versions 1.6x/1.6y and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN94244575/index.html; https://www.epson.jp/support/misc_t/201217_oshirase.htm; https://jvn.jp/en/jp/JVN94244575/index.html
CVE: CVE-2020-5684
Published: 2020-12-24
Description: iSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage Manager Express does not verify a server certificate properly, which allows a man-in-the-middle attacker to eavesdrop on an encrypted communication or alter the communication via a crafted certificate.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://jpn.nec.com/security-info/secinfo/nv20-015.html; https://jvn.jp/en/jp/JVN10100024/index.html; https://jpn.nec.com/security-info/secinfo/nv20-015.html
CVE: CVE-2020-35669
Published: 2020-12-24
Description: An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-74
References: https://github.com/dart-lang/http/blob/master/CHANGELOG.md#0133; https://github.com/dart-lang/http/issues/511; https://github.com/dart-lang/http/blob/master/CHANGELOG.md#0133
CVE: CVE-2020-35676
Published: 2020-12-24
Description: BigProf Online Invoicing System before 3.1 fails to correctly sanitize an XSS payload when a user registers using the self-registration functionality. As such, an attacker can input a crafted payload that will execute upon the application's administrator browsing the registered users' list. Once the arbitrary Javascript is executed in the context of the admin, this will cause the attacker to gain administrative privileges, effectively leading into an application takeover. This affects app/membership_signup.php and app/admin/pageViewMembers.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/bigprof-software/online-invoicing-system/releases/tag/3.1; https://labs.ingredous.com/2020/07/13/ois-membershipsignup-xss/; https://github.com/bigprof-software/online-invoicing-system/releases/tag/3.1
CVE: CVE-2020-35677
Published: 2020-12-24
Description: BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to create a new group, resulting in Stored XSS. The caveat here is that an attacker would need administrative privileges in order to create the payload. One might think this completely mitigates the privilege-escalation impact as there is only one high-privileged role. However, it was discovered that the endpoint responsible for creating the group lacks CSRF protection.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://labs.ingredous.com/2020/07/13/ois-groupedit-xss/; https://labs.ingredous.com/2020/07/13/ois-groupedit-xss/
CVE: CVE-2020-27718
Published: 2020-12-24
Description: When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, or 11.6.1-11.6.5.2 processes requests with JSON payload, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K58102101; https://support.f5.com/csp/article/K58102101
CVE: CVE-2020-27721
Published: 2020-12-24
Description: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, in a BIG-IP DNS / BIG-IP LTM GSLB deployment, under certain circumstances, the BIG-IP DNS system may stop using a BIG-IP LTM virtual server for DNS response.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K52035247; https://support.f5.com/csp/article/K52035247
CVE: CVE-2020-27724
Published: 2020-12-24
Description: In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic over the tunnel.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://support.f5.com/csp/article/K04518313; https://support.f5.com/csp/article/K04518313
CVE: CVE-2020-27725
Published: 2020-12-24
Description: In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with access to those services can trigger this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-401
References: https://support.f5.com/csp/article/K25595031; https://support.f5.com/csp/article/K25595031
CVE: CVE-2020-28169
Published: 2020-12-24
Description: The td-agent-builder plugin before 2020-12-18 for Fluentd allows attackers to gain privileges because the bin directory is writable by a user account, but a file in bin is executed as NT AUTHORITY\SYSTEM.
CVSS Score: 7.0 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/160791/Fluentd-TD-agent-4.0.1-Insecure-Folder-Permission.html; https://docs.fluentd.org/installation/install-by-msi; https://github.com/fluent-plugins-nursery/td-agent-builder/pull/247/commits/6f9cb6393392d62caa99907c0ebbcbab6b94a3f1
CVE: CVE-2020-28184
Published: 2020-12-24
Description: Cross-site scripting (XSS) vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to /module/index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; https://www.terra-master.com/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-28185
Published: 2020-12-24
Description: User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php.
CVSS Score: 5.3 (MEDIUM)
References: https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; https://www.terra-master.com/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-28186
Published: 2020-12-24
Description: Email Injection in TerraMaster TOS <= 4.2.06 allows remote unauthenticated attackers to abuse the forget password functionality and achieve account takeover.
CVSS Score: 7.3 (HIGH)
CWE: CWE-640
References: https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; https://www.terra-master.com/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-28187
Published: 2020-12-24
Description: Multiple directory traversal vulnerabilities in TerraMaster TOS <= 4.2.06 allow remote authenticated attackers to read, edit or delete any file within the filesystem via the (1) filename parameter to /tos/index.php?editor/fileGet, Event parameter to /include/ajax/logtable.php, or opt parameter to /include/core/index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; https://www.terra-master.com/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-28188
Published: 2020-12-24
Description: Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php in Event parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/172880/TerraMaster-TOS-4.2.06-Remote-Code-Execution.html; https://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-28189
Published: 2020-12-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29189. Reason: This candidate is a reservation duplicate of CVE-2020-29189. Notes: All CVE users should reference CVE-2020-29189 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-28190
Published: 2020-12-24
Description: TerraMaster TOS <= 4.2.06 was found to check for updates (of both system and applications) via an insecure channel (HTTP). Man-in-the-middle attackers are able to intercept these requests and serve a weaponized/infected version of applications or updates.
CVSS Score: 5.9 (MEDIUM)
References: https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; https://www.terra-master.com/; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/
CVE: CVE-2020-29189
Published: 2020-12-24
Description: Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS
CVSS Score: 8.1 (HIGH)
References: http://terramaster.com; https://www.ihteam.net/advisory/terramaster-tos-multiple-vulnerabilities/; http://terramaster.com
CVE: CVE-2020-27714
Published: 2020-12-24
Description: On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K60344652; https://support.f5.com/csp/article/K60344652
CVE: CVE-2020-27715
Published: 2020-12-24
Description: On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the httpd daemon.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K25691186; https://support.f5.com/csp/article/K25691186
CVE: CVE-2020-27716
Published: 2020-12-24
Description: On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM virtual server processes traffic of an undisclosed nature, the Traffic Management Microkernel (TMM) stops responding and restarts.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K51574311; https://support.f5.com/csp/article/K51574311
CVE: CVE-2020-27717
Published: 2020-12-24
Description: On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series of DNS requests may cause TMM to restart and generate a core file.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K43850230; https://support.f5.com/csp/article/K43850230
CVE: CVE-2020-27719
Published: 2020-12-24
Description: On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K19166530; https://support.f5.com/csp/article/K19166530
CVE: CVE-2020-27720
Published: 2020-12-24
Description: On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the default of 128, an undisclosed traffic pattern may cause the Traffic Management Microkernel (TMM) to restart.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K04048104; https://support.f5.com/csp/article/K04048104
CVE: CVE-2020-27722
Published: 2020-12-24
Description: In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://support.f5.com/csp/article/K73657294; https://support.f5.com/csp/article/K73657294
CVE: CVE-2020-27723
Published: 2020-12-24
Description: In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Microkernel (TMM) process.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K42933418; https://support.f5.com/csp/article/K42933418
CVE: CVE-2020-27726
Published: 2020-12-24
Description: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.f5.com/csp/article/K30343902; https://support.f5.com/csp/article/K30343902
CVE: CVE-2020-27727
Published: 2020-12-24
Description: On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing the user read access to the filesystem.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: https://support.f5.com/csp/article/K50343630; https://support.f5.com/csp/article/K50343630
CVE: CVE-2020-27728
Published: 2020-12-24
Description: On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under certain conditions, Analytics, Visibility, and Reporting daemon (AVRD) may generate a core file and restart on the BIG-IP system when processing requests sent from mobile devices.
CVSS Score: 7.5 (HIGH)
References: https://support.f5.com/csp/article/K45143221; https://support.f5.com/csp/article/K45143221
CVE: CVE-2020-27729
Published: 2020-12-24
Description: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, an undisclosed link on the BIG-IP APM virtual server allows a malicious user to build an open redirect URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://support.f5.com/csp/article/K15310332; https://support.f5.com/csp/article/K15310332
CVE: CVE-2020-35659
Published: 2020-12-24
Description: The DNS query log in Pi-hole before 5.2.2 is vulnerable to stored XSS. An attacker with the ability to directly or indirectly query DNS with a malicious hostname can cause arbitrary JavaScript to execute when the Pi-hole administrator visits the Query Log or Long-term data Query Log page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.mirch.io/2020/12/24/pihole-xss/; https://discourse.pi-hole.net/t/pi-hole-core-web-v5-2-2-and-ftl-v5-3-3-released/41998; https://github.com/pi-hole/AdminLTE/pull/1665
CVE: CVE-2020-35679
Published: 2020-12-24
Description: smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain regfree, which might allow attackers to trigger a "very significant" memory leak via messages to an instance that performs many regex lookups.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/openbsd/src/commit/79a034b4aed29e965f45a[PII_REDACTED]c9910043; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LKTFBQCHGMVPR4IZWHQIYAPM5J3LN3J/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYAYXRV2DM5K4RU7RHCDZSA2UF6VCTRC/
CVE: CVE-2020-35680
Published: 2020-12-24
Description: smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between the SMTP engine and the filters layer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/openbsd/src/commit/6c3220444ed06b5796dedfd53a0f4becd903c0d1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LKTFBQCHGMVPR4IZWHQIYAPM5J3LN3J/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYAYXRV2DM5K4RU7RHCDZSA2UF6VCTRC/
CVE: CVE-2020-9119
Published: 2020-12-24
Description: There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion.
CVSS Score: 6.2 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-smartphone-en
CVE: CVE-2020-9120
Published: 2020-12-24
Description: CloudEngine 1800V versions V100R019C10SPC500 has a resource management error vulnerability. Remote unauthorized attackers could send specific types of messages to the device, resulting in the message received by the system can't be forwarded normally.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-cloudengine-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-cloudengine-en
CVE: CVE-2020-9137
Published: 2020-12-24
Description: There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. Due to insufficient input validation, a local attacker with high privilege may execute some specially crafted scripts in the affected products. Successful exploit will cause privilege escalation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-02-privilege-en
CVE: CVE-2020-9200
Published: 2020-12-24
Description: There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-csvinjection-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-csvinjection-en
CVE: CVE-2020-9201
Published: 2020-12-24
Description: There is an out-of-bounds read vulnerability in some versions of NIP6800, Secospace USG6600 and USG9500. The software reads data past the end of the intended buffer when parsing DHCP messages including crafted parameter. Successful exploit could cause certain service abnormal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-04-eudemon-en
CVE: CVE-2020-9202
Published: 2020-12-24
Description: There is an information disclosure vulnerability in TE Mobile software versions V600R006C10,V600R006C10SPC100. Due to the improper storage of some information in certain specific scenario, the attacker can gain information in the victim's device to launch the attack, successful exploit could cause information disclosure.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-922
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-informationleak-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201209-01-informationleak-en
CVE: CVE-2020-24658
Published: 2020-12-24
Description: Arm Compiler 5 through 5.06u6 has an error in a stack protection feature designed to help spot stack-based buffer overflows in local arrays. When this feature is enabled, a protected function writes a guard value to the stack prior to (above) any vulnerable arrays in the stack. The guard value is checked for corruption on function return; corruption leads to an error-handler call. In certain circumstances, the reference value that is compared against the guard value is itself also written to the stack (after any vulnerable arrays). The reference value is written to the stack when the function runs out of registers to use for other temporary data. If both the reference value and the guard value are written to the stack, then the stack protection will fail to spot corruption when both values are overwritten with the same value. For both the reference value and the guard value to be corrupted, there would need to be both a buffer overflow and a buffer underflow in the vulnerable arrays (or some other vulnerability that causes two separated stack entries to be corrupted).
CVSS Score: 7.8 (HIGH)
CWE: CWE-770, CWE-787
References: https://developer.arm.com/support/arm-security-updates/arm-compiler-5-stack-protection; https://developer.arm.com/support/arm-security-updates/arm-compiler-5-stack-protection
CVE: CVE-2020-35693
Published: 2020-12-24
Description: On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without any user interaction, when the target device's Bluetooth is on, and it is running an app that offers a connectable BLE advertisement. An example of such an app could be a Bluetooth-based contact tracing app, such as Australia's COVIDSafe app, Singapore's TraceTogether app, or France's TousAntiCovid (formerly StopCovid). As part of the pairing process, two pieces (among others) of personally identifiable information are exchanged: the Identity Address of the Bluetooth adapter of the target device, and its associated Identity Resolving Key (IRK). Either one of these identifiers can be used to perform re-identification of the target device for long term tracking. The list of affected devices includes (but is not limited to): Galaxy Note 5, Galaxy S6 Edge, Galaxy A3, Tab A (2017), J2 Pro (2018), Galaxy Note 4, and Galaxy S5.
CVSS Score: 8.8 (HIGH)
References: https://github.com/alwentiu/contact-tracing-research/blob/main/samsung.pdf; https://github.com/alwentiu/contact-tracing-research/blob/main/samsung.pdf
CVE: CVE-2020-11093
Published: 2020-12-24
Description: Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a specific transaction which enables an attacker to make certain unauthorized alterations to the ledger. Updating a DID with a nym transaction will be written to the ledger if neither ROLE or VERKEY are being changed, regardless of sender. A malicious DID with no particular role can ask an update for another DID (but cannot modify its verkey or role). This is bad because 1) Any DID can write a nym transaction to the ledger (i.e., any DID can spam the ledger with nym transactions), 2) Any DID can change any other DID's alias, 3) The update transaction modifies the ledger metadata associated with a DID.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/hyperledger/indy-node/blob/master/CHANGELOG.md#1124; https://github.com/hyperledger/indy-node/blob/master/docs/source/auth_rules.md; https://github.com/hyperledger/indy-node/commit/55056f22c83b7c3520488b615e1577e0f895d75a