deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-18816
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000049049/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0290; https://kb.netgear.com/000049049/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0290
CVE: CVE-2017-18819
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings.
CVSS Score: 3.3 (LOW)
References: https://kb.netgear.com/000049046/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0289; https://kb.netgear.com/000049046/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-devices-PSV-2017-0289
CVE: CVE-2017-18820
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000049045/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-ReadyNAS-devices-PSV-2017-0266; https://kb.netgear.com/000049045/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-ReadyNAS-devices-PSV-2017-0266
CVE: CVE-2019-8960
Published: 2020-04-21
Description: A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function used in lmadmin.exe can, given a certain message, call itself again and then wait for a further message. With a particular flag set in the original message, but no second message received, the function eventually return an unexpected value which leads to an exception being thrown. The end result can be process termination.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8960-remediated-in-FlexNet-Publisher/ta-p/124598/jump-to/first-unread-message; https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8960-remediated-in-FlexNet-Publisher/ta-p/124598/jump-to/first-unread-message
CVE: CVE-2019-8961
Published: 2020-04-21
Description: A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function calls itself recursively given a certain condition in the received message, an unauthenticated remote attacker can repeatedly send messages of that type to cause a stack exhaustion condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8961-remediated-in-FlexNet-Publisher/ta-p/124601/jump-to/first-unread-message; https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8961-remediated-in-FlexNet-Publisher/ta-p/124601/jump-to/first-unread-message
CVE: CVE-2017-18806
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049061/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2214; https://kb.netgear.com/000049061/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2214
CVE: CVE-2017-18807
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000049058/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2001; https://kb.netgear.com/000049058/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2001
CVE: CVE-2017-18808
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of security settings.
CVSS Score: 4.2 (MEDIUM)
References: https://kb.netgear.com/000049057/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2000; https://kb.netgear.com/000049057/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-2000
CVE: CVE-2017-18809
Published: 2020-04-21
Description: NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000049056/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0301; https://kb.netgear.com/000049056/Security-Advisory-for-Stored-Cross-Site-Scripting-Vulnerability-on-Some-ReadyNAS-Devices-PSV-2017-0301
CVE: CVE-2020-10786
Published: 2020-04-21
Description: A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://gitlab.com/snippets/1954764; https://gitlab.com/snippets/1954764
CVE: CVE-2020-10787
Published: 2020-04-21
Description: An elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root system access from the admin account via v-change-user-password (aka the user password change script).
CVSS Score: 8.8 (HIGH)
References: https://gitlab.com/snippets/1954764; https://gitlab.com/snippets/1954764
CVE: CVE-2020-11889
Published: 2020-04-21
Description: An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups.
CVSS Score: 5.3 (MEDIUM)
References: https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-incorrect-access-control-in-com-users-access-level-deletion-function; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-incorrect-access-control-in-com-users-access-level-deletion-function
CVE: CVE-2020-11890
Published: 2020-04-21
Description: An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html
CVE: CVE-2020-11891
Published: 2020-04-21
Description: An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups.
CVSS Score: 5.3 (MEDIUM)
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-incorrect-access-control-in-com-users-access-level-editing-function.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-incorrect-access-control-in-com-users-access-level-editing-function.html
CVE: CVE-2020-1699
Published: 2020-04-21
Description: A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information disclosure on the host machine running the Ceph dashboard.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-22
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1699
CVE: CVE-2020-1757
Published: 2020-04-21
Description: A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-200, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1757
CVE: CVE-2020-5268
Published: 2020-04-21
Description: In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to be the subject of the token. There is also support in the Saml2 protocol for issuing tokens that is tied to a subject through other means, e.g. holder-of-key where possession of a private key must be proved. The Sustainsys.Saml2 library incorrectly treats all incoming tokens as bearer tokens, even though they have another subject confirmation method specified. This could be used by an attacker that could get access to Saml2 tokens with another subject confirmation method than bearer. The attacker could then use such a token to create a log in session. This vulnerability is patched in versions 1.0.2 and 2.7.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-303, CWE-287
References: https://github.com/Sustainsys/Saml2/commit/e58e0a1aff2b1ead6aca080b7cdced55ee6d5241; https://github.com/Sustainsys/Saml2/issues/712; https://github.com/Sustainsys/Saml2/security/advisories/GHSA-9475-xg6m-j7pw
CVE: CVE-2017-18802
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800 before 1.0.2.32, EX6200v2 before 1.0.1.50, and D7800 before 1.0.1.22.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181; https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181
CVE: CVE-2017-18803
Published: 2020-04-21
Description: NETGEAR R7800 devices before 1.0.2.30 are affected by incorrect configuration of security settings.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://kb.netgear.com/000049063/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-R7800-Routers-PSV-2017-0136; https://kb.netgear.com/000049063/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-R7800-Routers-PSV-2017-0136
CVE: CVE-2017-18804
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049062/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-and-R9000-Routers-PSV-2016-0128; https://kb.netgear.com/000049062/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-and-R9000-Routers-PSV-2016-0128
CVE: CVE-2017-18805
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 before 2.1.2, WN604 before 3.3.7, WNDAP660 before 3.7.4.0, WNDAP350 before 3.7.4.0, WNAP320 before 3.7.4.0, WNAP210v2 before 3.7.4.0, and WNDAP360 before 3.7.4.0.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049060/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2213; https://kb.netgear.com/000049060/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Wireless-Access-Points-PSV-2017-2213
CVE: CVE-2020-8895
Published: 2020-04-21
Description: Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-426
References: https://support.google.com/earth/answer/40901?hl=en; https://support.google.com/earth/answer/40901?hl=en
CVE: CVE-2017-18790
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317; https://kb.netgear.com/000049372/Security-Advisory-for-Sensitive-Information-Disclosure-Vulnerability-on-Some-Routers-PSV-2017-0317
CVE: CVE-2017-18791
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR2020 before 1.1.0.40, WNR2050 before 1.1.0.40, WNR614 before 1.1.0.40, WNR618 before 1.1.0.40, and D7000 before 1.0.1.50.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://kb.netgear.com/000049371/Security-Advisory-for-Cross-Site-Request-Forgery-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-0386; https://kb.netgear.com/000049371/Security-Advisory-for-Cross-Site-Request-Forgery-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-0386
CVE: CVE-2017-18792
Published: 2020-04-21
Description: NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.
CVSS Score: 8.4 (HIGH)
CWE: CWE-74
References: https://kb.netgear.com/000049370/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-PSV-2017-2455; https://kb.netgear.com/000049370/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-PSV-2017-2455
CVE: CVE-2017-18793
Published: 2020-04-21
Description: NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049369/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-PSV-2017-0618; https://kb.netgear.com/000049369/Security-Advisory-for-Command-Injection-Vulnerability-on-R7800-PSV-2017-0618
CVE: CVE-2017-18794
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, R8500 before 1.0.2.100, and D6100 before 1.0.0.50_0.0.50.
CVSS Score: 8.4 (HIGH)
CWE: CWE-74
References: https://kb.netgear.com/000049368/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-and-Some-Routers-PSV-2017-0321; https://kb.netgear.com/000049368/Security-Advisory-for-Command-Injection-Vulnerability-on-D6100-and-Some-Routers-PSV-2017-0321
CVE: CVE-2017-18795
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50_0.0.50.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049367/Security-Advisory-for-Command-Injection-Vulnerability-on-D6220-and-D6100-PSV-2016-0133; https://kb.netgear.com/000049367/Security-Advisory-for-Command-Injection-Vulnerability-on-D6220-and-D6100-PSV-2016-0133
CVE: CVE-2017-18796
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 before 1.0.9.10, R7000P before 1.0.1.16, R6900P before 1.0.1.16, and R7800 before 1.0.2.36.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049366/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Routers-PSV-2016-0106; https://kb.netgear.com/000049366/Security-Advisory-for-Command-Injection-Vulnerability-on-Some-Routers-PSV-2016-0106
CVE: CVE-2017-18797
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.24, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-200
References: https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318; https://kb.netgear.com/000049365/Security-Advisory-for-Arbitrary-File-Read-Vulnerability-on-Some-Routers-PSV-2017-0318
CVE: CVE-2017-18798
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, D7000 before 1.0.1.50, and D1500 before 1.0.0.25.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159; https://kb.netgear.com/000049358/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-Some-Routers-and-Some-DSL-Modem-Routers-PSV-2017-2159
CVE: CVE-2017-18799
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14, R8000 before 1.0.3.22, R8500 before 1.0.2.74, and D8500 before 1.0.3.28.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://kb.netgear.com/000049357/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-D8500-and-Some-Routers-PSV-2017-0528; https://kb.netgear.com/000049357/Security-Advisory-for-Security-Misconfiguration-Vulnerability-on-D8500-and-Some-Routers-PSV-2017-0528
CVE: CVE-2017-18800
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://kb.netgear.com/000049356/Security-Advisory-for-Reflected-Cross-Site-Scripting-Vulnerability-on-R6700v2-and-R6800-PSV-2017-2162; https://kb.netgear.com/000049356/Security-Advisory-for-Reflected-Cross-Site-Scripting-Vulnerability-on-R6700v2-and-R6800-PSV-2017-2162
CVE: CVE-2017-18801
Published: 2020-04-21
Description: Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR3700v5 before 1.1.0.48, and D7000 before 1.0.1.50.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151; https://kb.netgear.com/000049355/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-and-Some-Routers-PSV-2017-2151
CVE: CVE-2019-17525
Published: 2020-04-21
Description: The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-307
References: http://packetstormsecurity.com/files/157936/D-Link-DIR-615-T1-20.10-CAPTCHA-Bypass.html; https://github.com/huzaifahussain98/CVE-2019-17525/; http://packetstormsecurity.com/files/157936/D-Link-DIR-615-T1-20.10-CAPTCHA-Bypass.html
CVE: CVE-2019-4327
Published: 2020-04-21
Description: "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files."
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078222; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0078222
CVE: CVE-2020-10569
Published: 2020-04-21
Description: SysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a GhostCat attack. Additionally, it allows unauthenticated access to upload files, which can be used to execute commands on the system by chaining it with a GhostCat attack. NOTE: This may be a duplicate of CVE-2020-1938
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/157314/Sysaid-20.1.11-b26-Remote-Command-Execution.html; https://www.sysaid.com/product/on-premise/20-2/release-notes; http://packetstormsecurity.com/files/157314/Sysaid-20.1.11-b26-Remote-Command-Execution.html
CVE: CVE-2020-11008
Published: 2020-04-21
Description: Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an exploit where _some_ credential is leaked (but the attacker cannot control which one). Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system. Specially-crafted URLs that are considered illegal as of the recently published Git versions can cause Git to send a "blank" pattern to helpers, missing hostname and protocol fields. Many helpers will interpret this as matching _any_ URL, and will return some unspecified stored password, leaking the password to an attacker's server. The vulnerability can be triggered by feeding a malicious URL to `git clone`. However, the affected URLs look rather suspicious; the likely vector would be through systems which automatically clone URLs not visible to the user, such as Git submodules, or package systems built around Git. The root of the problem is in Git itself, which should not be feeding blank input to helpers. However, the ability to exploit the vulnerability in practice depends on which helpers are in use. Credential helpers which are known to trigger the vulnerability: - Git's "store" helper - Git's "cache" helper - the "osxkeychain" helper that ships in Git's "contrib" directory Credential helpers which are known to be safe even with vulnerable versions of Git: - Git Credential Manager for Windows Any helper not in this list should be assumed to trigger the vulnerability.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20, CWE-522
References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html; http://seclists.org/fulldisclosure/2020/May/41; https://github.com/git/git/commit/c44088ecc4b0722636e0a305f9608d[PII_REDACTED]
CVE: CVE-2020-5301
Published: 2020-04-21
Description: SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for pages hosted by modules, has code to identify paths ending with `.php` and process those as PHP code. If no other suitable way of handling the given path exists it presents the file to the browser. The check to identify paths ending with `.php` does not account for uppercase letters. If someone requests a path ending with e.g. `.PHP` and the server is serving the code from a case-insensitive file system, such as on Windows, the processing of the PHP code does not occur, and the source code is instead presented to the browser. An attacker may use this issue to gain access to the source code in third-party modules that is meant to be private, or even sensitive. However, the attack surface is considered small, as the attack will only work when SimpleSAMLphp serves such content from a file system that is not case-sensitive, such as on Windows. This issue is fixed in version 1.18.6.
CVSS Score: 3.0 (LOW)
CWE: CWE-200, CWE-178
References: https://github.com/simplesamlphp/simplesamlphp/commit/47968d26a2fd3ed52da70dc09210921d612ce44e; https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-24m3-w8g9-jwpq; https://github.com/simplesamlphp/simplesamlphp/commit/47968d26a2fd3ed52da70dc09210921d612ce44e