deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41231
Published: 2022-09-21
Description: Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2139; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2139
CVE: CVE-2022-41232
Published: 2022-09-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a crafted file name to an API endpoint.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2139; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2139
CVE: CVE-2022-41233
Published: 2022-09-21
Description: Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers with Item/Read permission to obtain information about build artifacts of a given job, if the optional Run/Artifacts permission is enabled.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2170; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2170
CVE: CVE-2022-41234
Published: 2022-09-21
Description: Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing users with Overall/Read permission to trigger jobs that are configured to be triggerable via Rundeck.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2169; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2169
CVE: CVE-2022-41235
Published: 2022-09-21
Description: Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2645; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2645
CVE: CVE-2022-41236
Published: 2022-09-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to replace the generated report stored in a per-session cache and displayed to authorized users at the .../report URL with a report based on attacker-specified report generation options.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2051; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2051
CVE: CVE-2022-41237
Published: 2022-09-21
Description: Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1737; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1737
CVE: CVE-2022-41238
Published: 2022-09-21
Description: A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to the attacker-specified repository for attacker-specified commits.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2867
CVE: CVE-2022-41239
Published: 2022-09-21
Description: Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2884; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2884
CVE: CVE-2022-41240
Published: 2022-09-21
Description: Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide malicious API responses from Walti.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1870; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-1870
CVE: CVE-2022-41241
Published: 2022-09-21
Description: Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2805; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2805
CVE: CVE-2022-41242
Published: 2022-09-21
Description: A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2001; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2001
CVE: CVE-2022-41243
Published: 2022-09-21
Description: Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2068; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2068
CVE: CVE-2022-41244
Published: 2022-09-21
Description: Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2069; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2069
CVE: CVE-2022-41245
Published: 2022-09-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237
CVE: CVE-2022-41246
Published: 2022-09-21
Description: A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2237
CVE: CVE-2022-41247
Published: 2022-09-21
Description: Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243
CVE: CVE-2022-41248
Published: 2022-09-21
Description: Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the potential for attackers to observe and capture it.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312, CWE-312
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2243; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41249
Published: 2022-09-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2708; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41250
Published: 2022-09-21
Description: A missing permission check in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2708; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41251
Published: 2022-09-21
Description: A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2710; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41252
Published: 2022-09-21
Description: Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2752; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41253
Published: 2022-09-21
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2751; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41254
Published: 2022-09-21
Description: Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2751; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-41255
Published: 2022-09-21
Description: Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: http://www.openwall.com/lists/oss-security/2022/09/21/5; https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2759; http://www.openwall.com/lists/oss-security/2022/09/21/5
CVE: CVE-2022-37027
Published: 2022-09-21
Description: Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web interface can inject Java Runtime Options. These take effect after a restart. For example, an attacker can enable JMX services and consequently achieve remote code execution as the system user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-88, CWE-88
References: https://wiki.ahsay.com/doku.php?id=public:resources:release_notes_v9320; https://www.ahsay.com/jsp/en/downloads/ahsay-downloads_latest-software_ahsaycbs.jsp; https://www.ahsay.com/partners/en/home/index.jsp?pageContentKey=ahsay_assets_latest_hotfix
CVE: CVE-2022-3250
Published: 2022-09-21
Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-614, CWE-311
References: https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee; https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23; https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee
CVE: CVE-2022-3251
Published: 2022-09-21
Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-614, CWE-311
References: https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a; https://huntr.dev/bounties/b9a1b411-060b-4235-9426-e39bd0a1d6d9; https://github.com/ikus060/minarca/commit/7b5c7e6cbd59268d5cd4f1b5f42e721db116f71a
CVE: CVE-2022-40616
Published: 2022-09-21
Description: IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/236311; https://www.ibm.com/support/pages/node/6621599; https://exchange.xforce.ibmcloud.com/vulnerabilities/236311
CVE: CVE-2022-30577
Published: 2022-09-21
Description: The Web Server component of TIBCO Software Inc.'s TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 6.0.0 through 6.0.8.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-cve-2022-30577; https://www.tibco.com/services/support/advisories
CVE: CVE-2022-30578
Published: 2022-09-21
Description: The Web Server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 5.4.1 and below.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-sep-21-2022-ebx-add-ons-cve-2022-30578; https://www.tibco.com/support/advisories/2022/09/tibco-security-advisory-september-21-2022-tibco-ebx-add-ons-cve-2022
CVE: CVE-2022-31679
Published: 2022-09-21
Description: Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.
CVSS Score: 3.7 (LOW)
References: https://tanzu.vmware.com/security/cve-2022-31679; https://tanzu.vmware.com/security/cve-2022-31679
CVE: CVE-2022-40026
Published: 2022-09-21
Description: SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-SQL1.md; https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-SQL1.md
CVE: CVE-2022-40027
Published: 2022-09-21
Description: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTask.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://simple.com; https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-XSS1.md; https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
CVE: CVE-2022-40028
Published: 2022-09-21
Description: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://simple.com; https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-XSS2.md; https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
CVE: CVE-2022-40029
Published: 2022-09-21
Description: SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the shortName parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://simple.com; https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-XSS3.md; https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
CVE: CVE-2022-40030
Published: 2022-09-21
Description: SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://simple.com; https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-SQL2.md; https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
CVE: CVE-2021-43310
Published: 2022-09-21
Description: A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier. This could lead to a remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-290, CWE-290
References: https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r; https://seclists.org/oss-sec/2022/q1/101; https://github.com/keylime/keylime/security/advisories/GHSA-2m39-75g9-ff5r
CVE: CVE-2022-23948
Published: 2022-09-21
Description: A flaw was found in Keylime before 6.3.0. The logic in the Keylime agent for checking for a secure mount can be fooled by previously created unprivileged mounts allowing secrets to be leaked to other processes on the host.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/keylime/keylime/commit/1a4f31a6368d651222683c9debe7d6832db6f607; https://github.com/keylime/keylime/commit/d37c406e69cb6689baa2fb7964bad[PII_REDACTED]4; https://github.com/keylime/keylime/security/advisories/GHSA-wj36-qcfg-5j52
CVE: CVE-2022-23949
Published: 2022-09-21
Description: In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290, CWE-290
References: https://github.com/keylime/keylime/commit/387e320dc22c89f4f47c68cb37eb9eec2137f34b; https://github.com/keylime/keylime/commit/65c2b737129b5837f4a03660aeb1191ced275a57; https://github.com/keylime/keylime/commit/e429e95329fc60608713ddfb82f4a92ee3b3d2d9
CVE: CVE-2022-23950
Published: 2022-09-21
Description: In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-379, CWE-668
References: https://github.com/keylime/keylime/commit/ea5d0373fa2c050d5d95404eb779be7e8327b911; https://github.com/keylime/keylime/security/advisories/GHSA-9r9r-f8xc-m875; https://seclists.org/oss-sec/2022/q1/101
CVE: CVE-2022-23951
Published: 2022-09-21
Description: In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/keylime/keylime/commit/6e44758b64b0ee13564fc46e807f4ba98091c355; https://github.com/keylime/keylime/security/advisories/GHSA-6xx7-m45w-76m2; https://seclists.org/oss-sec/2022/q1/101
CVE: CVE-2022-23952
Published: 2022-09-21
Description: In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/keylime/keylime/commit/883085d6a4bcea[PII_REDACTED]d5b8e15ecd65fc7c; https://github.com/keylime/keylime/security/advisories/GHSA-fchm-5w2v-qfm8; https://seclists.org/oss-sec/2022/q1/101
CVE: CVE-2022-29799
Published: 2022-09-21
Description: A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/; https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
CVE: CVE-2022-29800
Published: 2022-09-21
Description: A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/; https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
CVE: CVE-2022-35621
Published: 2022-09-21
Description: Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code fa2084d5abca91a62ed1d2f1cad3ec318e6a9a2d7f1510a00d898737b05f48ae allows remote attackers to execute fraudulent NFT transfers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/MacherCS/CVE_Evoh_Contract; https://github.com/MacherCS/CVE_Evoh_Contract