deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-22918
Published: 2021-07-12
Description: Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://hackerone.com/reports/1209681; https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/
CVE: CVE-2021-22921
Published: 2021-07-12
Description: Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://hackerone.com/reports/1211160; https://nodejs.org/en/blog/vulnerability/july-2021-security-releases/
CVE: CVE-2021-27293
Published: 2021-07-12
Description: RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-697
References: https://github.com/restsharp/RestSharp/issues/1556; https://restsharp.dev/; https://github.com/restsharp/RestSharp/issues/1556
CVE: CVE-2021-35037
Published: 2021-07-12
Description: Jamf Pro before 10.30.1 allows for an unvalidated URL redirect vulnerability affecting Jamf Pro customers who host their environments on-premises. An attacker may craft a URL that appears to be for a customer's Jamf Pro instance, but when clicked will forward a user to an arbitrary URL that may be malicious. This is tracked via Jamf with the following ID: PI-009822
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://www.jamf.com/jamf-nation/discussions/39219/jamf-pro-10-30-1-security-upgrade; https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/; https://www.jamf.com/jamf-nation/discussions/39219/jamf-pro-10-30-1-security-upgrade
CVE: CVE-2021-3547
Published: 2021-07-12
Description: OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the verify-x509-name option in a client configuration.
CVSS Score: 7.4 (HIGH)
CWE: CWE-305, CWE-295
References: https://community.openvpn.net/openvpn/wiki/CVE-2021-3547; https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements; https://community.openvpn.net/openvpn/wiki/CVE-2021-3547
CVE: CVE-2021-30129
Published: 2021-07-12
Description: A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2021/07/12/1; https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da[PII_REDACTED]80ecd24096bde6db36f%40%3Cusers.mina.apache.org%3E; https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da[PII_REDACTED]80ecd24096bde6db36f%40%3Cusers.mina.apache.org%3E
CVE: CVE-2021-35064
Published: 2021-07-12
Description: KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: http://packetstormsecurity.com/files/166623/Kramer-VIAware-Remote-Code-Execution.html; https://www.kramerav.com/us/product/viaware; http://packetstormsecurity.com/files/166623/Kramer-VIAware-Remote-Code-Execution.html
CVE: CVE-2020-21131
Published: 2021-07-12
Description: SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/SZFsir/tmpProject/issues/3; https://www.mituo.cn/news/2473.html; https://github.com/SZFsir/tmpProject/issues/3
CVE: CVE-2020-21132
Published: 2021-07-12
Description: SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/SZFsir/tmpProject/issues/2; https://www.mituo.cn/news/2473.html; https://github.com/SZFsir/tmpProject/issues/2
CVE: CVE-2020-21133
Published: 2021-07-12
Description: SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/SZFsir/tmpProject/issues/1; https://www.mituo.cn/news/2473.html; https://github.com/SZFsir/tmpProject/issues/1
CVE: CVE-2021-26089
Published: 2021-07-12
Description: An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell commands during installation phase.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-59
References: https://fortiguard.com/advisory/FG-IR-21-022; https://www.zerodayinitiative.com/advisories/ZDI-22-078/; https://fortiguard.com/advisory/FG-IR-21-022
CVE: CVE-2021-26090
Published: 2021-07-12
Description: A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://fortiguard.com/advisory/FG-IR-21-042; https://fortiguard.com/advisory/FG-IR-21-042
CVE: CVE-2021-32678
Published: 2021-07-12
Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ratelimits are not applied to OCS API responses. This affects any OCS API controller (`OCSController`) using the `@BruteForceProtection` annotation. Risk depends on the installed applications on the Nextcloud Server, but could range from bypassing authentication ratelimits or spamming other Nextcloud users. The vulnerability is patched in versions 19.0.13, 20.0.11, and 21.0.3. No workarounds aside from upgrading are known to exist.
CVSS Score: 3.7 (LOW)
CWE: CWE-799, CWE-307
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-48rx-3gmf-g74j; https://github.com/nextcloud/server/pull/27329; https://hackerone.com/reports/1214158
CVE: CVE-2021-32679
Published: 2021-07-12
Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, filenames where not escaped by default in controllers using `DownloadResponse`. When a user-supplied filename was passed unsanitized into a `DownloadResponse`, this could be used to trick users into downloading malicious files with a benign file extension. This would show in UI behaviours where Nextcloud applications would display a benign file extension (e.g. JPEG), but the file will actually be downloaded with an executable file extension. The vulnerability is patched in versions 19.0.13, 20.0.11, and 21.0.3. Administrators of Nextcloud instances do not have a workaround available, but developers of Nextcloud apps may manually escape the file name before passing it into `DownloadResponse`.
CVSS Score: 3.5 (LOW)
CWE: CWE-116, CWE-116
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3hjp-26x8-mhf6; https://github.com/nextcloud/server/pull/27354; https://hackerone.com/reports/1215263
CVE: CVE-2021-36377
Published: 2021-07-12
Description: Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://fossil-scm.org/forum/forumpost/8d367e16f53d93c789d70bd3bf2c9587227bbd5c6a7b8e512cccd[PII_REDACTED]6; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBTRZ5HCOUTIIKJF3T37NORI4P7EVYCY/; https://fossil-scm.org/forum/forumpost/8d367e16f53d93c789d70bd3bf2c9587227bbd5c6a7b8e512cccd[PII_REDACTED]6
CVE: CVE-2020-7872
Published: 2021-07-12
Description: DaviewIndy v8.98.7.0 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed format file that is mishandled by DaviewIndy. Attackers could exploit this and arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://datools.kr/zeroboard/view.php?id=datools_notice&page=5&sn1=&divpage=1&sn=off&ss=on&sc=on&select_arrange=headnum&desc=asc&no=506; http://datools.kr/zeroboard/view.php?id=datools_notice&page=5&sn1=&divpage=1&sn=off&ss=on&sc=on&select_arrange=headnum&desc=asc&no=506
CVE: CVE-2021-24013
Published: 2021-07-12
Description: Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://fortiguard.com/advisory/FG-IR-21-014; https://fortiguard.com/advisory/FG-IR-21-014
CVE: CVE-2021-24015
Published: 2021-07-12
Description: An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.4 may allow an authenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-021; https://fortiguard.com/advisory/FG-IR-21-021
CVE: CVE-2021-26088
Published: 2021-07-12
Description: An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: https://fortiguard.com/advisory/FG-IR-20-191; https://fortiguard.com/advisory/FG-IR-20-191
CVE: CVE-2021-32680
Published: 2021-07-12
Description: Nextcloud Server is a Nextcloud package that handles data storage. In versions priot to 19.0.13, 20.0.11, and 21.0.3, Nextcloud Server audit logging functionality wasn't properly logging events for the unsetting of a share expiration date. This event is supposed to be logged. This issue is patched in versions 19.0.13, 20.0.11, and 21.0.3.
CVSS Score: 3.3 (LOW)
CWE: CWE-778
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-fxpq-wq7c-vppf; https://github.com/nextcloud/server/pull/27024; https://hackerone.com/reports/1200810
CVE: CVE-2021-32688
Published: 2021-07-12
Description: Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server supports application specific tokens for authentication purposes. These tokens are supposed to be granted to a specific applications (e.g. DAV sync clients), and can also be configured by the user to not have any filesystem access. Due to a lacking permission check, the tokens were able to change their own permissions in versions prior to 19.0.13, 20.0.11, and 21.0.3. Thus fileystem limited tokens were able to grant themselves access to the filesystem. The issue is patched in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds aside from upgrading.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-552
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-48m7-7r2r-838r; https://github.com/nextcloud/server/pull/27000; https://hackerone.com/reports/1193321
CVE: CVE-2021-36382
Published: 2021-07-12
Description: Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).
CVSS Score: 2.6 (LOW)
CWE: CWE-319, CWE-522
References: https://devolutions.net/security/advisories/DEVO-2021-0005; https://devolutions.net/security/advisories/DEVO-2021-0005
CVE: CVE-2021-36383
Published: 2021-07-12
Description: Xen Orchestra (with xo-web through 5.80.0 and xo-server through 5.84.0) mishandles authorization, as demonstrated by modified WebSocket resourceSet.getAll data is which the attacker changes the permission field from none to admin. The attacker gains access to data sets such as VMs, Backups, Audit, Users, and Groups.
CVSS Score: 4.3 (MEDIUM)
References: https://github.com/vatesfr/xen-orchestra/issues/5712; https://github.com/vatesfr/xen-orchestra/issues/5712
CVE: CVE-2020-18979
Published: 2021-07-12
Description: Cross Siste Scripting (XSS) vulnerablity in Halo 0.4.3 via the X-forwarded-for Header parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/halo-dev/halo/issues/126; https://github.com/halo-dev/halo/issues/126
CVE: CVE-2020-18980
Published: 2021-07-12
Description: Remote Code Executon vulnerability in Halo 0.4.3 via the remoteAddr and themeName parameters.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/halo-dev/halo/issues/134; https://github.com/halo-dev/halo/issues/134
CVE: CVE-2021-30639
Published: 2021-07-12
Description: A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I/O are not exposed to this vulnerability. This issue affects Apache Tomcat 10.0.3 to 10.0.4; 9.0.44; 8.5.64.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10366; https://lists.apache.org/thread.html/r79a7c019712b39aedf7cf4da9276d80610f04441b2a4f6506cb2daaf%40%3Cdev.tomcat.apache.org%3E; https://lists.apache.org/thread.html/r79a7c019712b39aedf7cf4da9276d80610f04441b2a4f6506cb2daaf%40%3Cusers.tomcat.apache.org%3E
CVE: CVE-2021-30640
Published: 2021-07-12
Description: A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-116
References: https://lists.apache.org/thread.html/r59f9ef03929d32120f91f4ea7e6e79edd5688d75d0a9b65fd26d1fe8%40%3Cannounce.tomcat.apache.org%3E; https://lists.debian.org/debian-lts-announce/2021/08/msg00009.html; https://security.gentoo.org/glsa/202208-34
CVE: CVE-2021-33037
Published: 2021-07-12
Description: Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10366; https://lists.apache.org/thread.html/r290aee55b72811fd19e75ac80f6143716c079170c5671b96932ed44b%40%3Ccommits.tomee.apache.org%3E; https://lists.apache.org/thread.html/r40f921575aee8d7d34e53182f862c45cbb8f3d898c9d4e865c2ec262%40%3Ccommits.tomee.apache.org%3E
CVE: CVE-2021-33807
Published: 2021-07-12
Description: Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://support.gespage.com/fr/support/solutions/articles/[PII_REDACTED]-security-advisory-gespage-directory-traversal; https://www.cartadis.com/gespage-website/; https://www.gespage.com
CVE: CVE-2020-19201
Published: 2021-07-12
Description: A Stored Cross-Site Scripting (XSS) vulnerability was found in status_filter_reload.php, a page in the pfSense software WebGUI, on Netgate pfSense version 2.4.4-p2 and earlier. The page did not encode output from the filter reload process, and a stored XSS was possible via the descr (description) parameter on NAT rules.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/pfsense/en/latest/releases/2-4-4-p3.html; https://gist.github.com/dharmeshbaskaran/fd[PII_REDACTED]d07651a883e8a040d916; https://www.pfsense.org/download/
CVE: CVE-2020-19203
Published: 2021-07-12
Description: An authenticated Cross-Site Scripting (XSS) vulnerability was found in widgets/widgets/wake_on_lan_widget.php, a component of the pfSense software WebGUI, on version 2.4.4-p2 and earlier. The widget did not encode the descr (description) parameter of wake-on-LAN entries in its output, leading to a possible stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.netgate.com/pfsense/en/latest/releases/2-4-4-p3.html; https://gist.github.com/dharmeshbaskaran/55d546496bfb0ba28117e846d8b785db; https://www.netgate.com/assets/downloads/advisories/pfSense-SA-19_04.webgui.asc
CVE: CVE-2020-19204
Published: 2021-07-12
Description: An authenticated Stored Cross-Site Scriptiong (XSS) vulnerability exists in Lightning Wire Labs IPFire 2.21 (x86_64) - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released; https://gist.github.com/dharmeshbaskaran/1fdc069c0ad729d12bf3304b5f19b02d; https://www.lightningwirelabs.com
CVE: CVE-2020-4938
Published: 2021-07-12
Description: IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191815; https://www.ibm.com/support/pages/node/6466717; https://exchange.xforce.ibmcloud.com/vulnerabilities/191815
CVE: CVE-2021-20414
Published: 2021-07-12
Description: IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216.
CVSS Score: 4.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196216; https://www.ibm.com/support/pages/node/6470849; https://exchange.xforce.ibmcloud.com/vulnerabilities/196216
CVE: CVE-2021-21588
Published: 2021-07-12
Description: Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead to configuration changes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://www.dell.com/support/kbdoc/000189265; https://www.dell.com/support/kbdoc/000189265
CVE: CVE-2021-21589
Published: 2021-07-12
Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to escalate privileges.
CVSS Score: 5.7 (MEDIUM)
References: https://www.dell.com/support/kbdoc/000189204; https://www.dell.com/support/kbdoc/000189204
CVE: CVE-2021-21590
Published: 2021-07-12
Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200, CWE-522
References: https://www.dell.com/support/kbdoc/000189204; https://www.dell.com/support/kbdoc/000189204
CVE: CVE-2021-21591
Published: 2021-07-12
Description: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200, CWE-522
References: https://www.dell.com/support/kbdoc/000189204; https://www.dell.com/support/kbdoc/000189204
CVE: CVE-2021-23389
Published: 2021-07-12
Description: The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/totaljs/framework/blob/master/utils.js%23L6606-L6631; https://github.com/totaljs/framework/commit/887b0fa9e162ef7a2dd9cec20a5ca122726373b3; https://snyk.io/vuln/SNYK-JS-TOTALJS-1088607
CVE: CVE-2021-23390
Published: 2021-07-12
Description: The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/totaljs/framework4/blob/master/utils.js%23L5430-L5455; https://github.com/totaljs/framework4/commit/8a72d8c20f38bbcac031a76a51238aa528f68821; https://snyk.io/vuln/SNYK-JS-TOTAL4-1130527
CVE: CVE-2021-29792
Published: 2021-07-12
Description: IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203450; https://www.ibm.com/support/pages/node/6469451; https://exchange.xforce.ibmcloud.com/vulnerabilities/203450
CVE: CVE-2021-29794
Published: 2021-07-12
Description: IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203556; https://www.ibm.com/support/pages/node/6469953; https://exchange.xforce.ibmcloud.com/vulnerabilities/203556
CVE: CVE-2021-29803
Published: 2021-07-12
Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204164.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/204164; https://www.ibm.com/support/pages/node/6471067; https://exchange.xforce.ibmcloud.com/vulnerabilities/204164
CVE: CVE-2021-29804
Published: 2021-07-12
Description: IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204262.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/204262; https://www.ibm.com/support/pages/node/6471067; https://exchange.xforce.ibmcloud.com/vulnerabilities/204262