deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11669
Published: 2019-09-10
Description: Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data.
CVSS Score: 7.5 (HIGH)
References: https://softwaresupport.softwaregrp.com/doc/KM03517334; https://softwaresupport.softwaregrp.com/doc/KM03517334
CVE: CVE-2019-12942
Published: 2019-09-10
Description: TTLock devices do not properly block guest access in certain situations where the network connection to the cloud is unavailable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://www.kth.se/polopoly_fs/[PII_REDACTED]098364%21/Vulnerability_Report_TTLock_State_Consistency.pdf; https://www.kth.se/polopoly_fs/[PII_REDACTED]098364%21/Vulnerability_Report_TTLock_State_Consistency.pdf
CVE: CVE-2019-12943
Published: 2019-09-10
Description: TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.
CVSS Score: 8.1 (HIGH)
CWE: CWE-640
References: https://www.kth.se/polopoly_fs/[PII_REDACTED]098316%21/Vulnerability_Report_TTLock_Password_Reset.pdf; https://www.kth.se/polopoly_fs/[PII_REDACTED]098316%21/Vulnerability_Report_TTLock_Password_Reset.pdf
CVE: CVE-2019-6745
Published: 2019-09-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-12828. Reason: This candidate is a reservation duplicate of CVE-2019-12828. Notes: All CVE users should reference CVE-2019-12828 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2019-16214
Published: 2019-09-11
Description: Libra Core before 2019-09-03 has an erroneous regular expression for inline comments, which makes it easier for attackers to interfere with code auditing by using a nonstandard line-break character for a comment. For example, a Move module author can enter the // sequence (which introduces a single-line comment), followed by very brief comment text, the \r character, and code that has security-critical functionality. In many popular environments, this code is displayed on a separate line, and thus a reader may infer that the code is executed. However, the code is NOT executed, because language/compiler/ir_to_bytecode/src/parser.rs allows the comment to continue after the \r character.
CVSS Score: 5.7 (MEDIUM)
References: https://blog.openzeppelin.com/libra-vulnerability-release/; https://blog.openzeppelin.com/libra-vulnerability-summary/; https://github.com/libra/libra/commit/7efb0221989f17fdf7f[PII_REDACTED]ed947a1e19e
CVE: CVE-2019-14724
Published: 2019-09-11
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14724.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-14725
Published: 2019-09-11
Description: In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to change the e-mail usage value of a victim account via an attacker account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://centos-webpanel.com/changelog-cwp7; https://github.com/i3umi3iei3ii/CentOS-Control-Web-Panel-CVE/blob/master/CVE-2019-14725.md; https://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
CVE: CVE-2019-16193
Published: 2019-09-11
Description: In ArcGIS Enterprise 10.6.1, a crafted IFRAME element can be used to trigger a Cross Frame Scripting (XFS) attack through the EDIT MY PROFILE feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.facebook.com/Huang.YuHsiang.Phone/posts/[PII_REDACTED]; https://www.facebook.com/Huang.YuHsiang.Phone/posts/[PII_REDACTED]
CVE: CVE-2019-14995
Published: 2019-09-11
Description: The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://jira.atlassian.com/browse/JRASERVER-69792; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0836; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0837
CVE: CVE-2019-14996
Published: 2019-09-11
Description: The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-69790; https://jira.atlassian.com/browse/JRASERVER-69790
CVE: CVE-2019-14997
Published: 2019-09-11
Description: The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-524
References: https://jira.atlassian.com/browse/JRASERVER-69794; https://jira.atlassian.com/browse/JRASERVER-69794
CVE: CVE-2019-14998
Published: 2019-09-11
Description: The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-69791; https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0835; https://jira.atlassian.com/browse/JRASERVER-69791
CVE: CVE-2019-16217
Published: 2019-09-11
Description: WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://core.trac.wordpress.org/changeset/45936; https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html; https://seclists.org/bugtraq/2020/Jan/8
CVE: CVE-2019-16218
Published: 2019-09-11
Description: WordPress before 5.2.3 allows XSS in stored comments.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html; https://seclists.org/bugtraq/2020/Jan/8; https://wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/
CVE: CVE-2019-16219
Published: 2019-09-11
Description: WordPress before 5.2.3 allows XSS in shortcode previews.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/zeroday/FG-VD-18-165; https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html; https://seclists.org/bugtraq/2020/Jan/8
CVE: CVE-2019-16220
Published: 2019-09-11
Description: In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://core.trac.wordpress.org/changeset/45971; https://github.com/WordPress/WordPress/commit/c86ee39ff4c1a79b93c967eb88522f5c09614a28; https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html
CVE: CVE-2019-16221
Published: 2019-09-11
Description: WordPress before 5.2.3 allows reflected XSS in the dashboard.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html; https://seclists.org/bugtraq/2020/Jan/8; https://wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/
CVE: CVE-2019-16222
Published: 2019-09-11
Description: WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://core.trac.wordpress.org/changeset/45997; https://github.com/WordPress/WordPress/commit/30ac67579559fe42251b5a9f887211bf61a8ed68; https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html
CVE: CVE-2019-16223
Published: 2019-09-11
Description: WordPress before 5.2.3 allows XSS in post previews by authenticated users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/160745/WordPress-Core-5.2.2-Cross-Site-Scripting.html; https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html; https://seclists.org/bugtraq/2020/Jan/8
CVE: CVE-2019-8449
Published: 2019-09-11
Description: The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: http://packetstormsecurity.com/files/156172/Jira-8.3.4-Information-Disclosure.html; https://jira.atlassian.com/browse/JRASERVER-69796; http://packetstormsecurity.com/files/156172/Jira-8.3.4-Information-Disclosure.html
CVE: CVE-2019-8450
Published: 2019-09-11
Description: Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-69795; https://jira.atlassian.com/browse/JRASERVER-69795
CVE: CVE-2019-8451
Published: 2019-09-11
Description: The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://jira.atlassian.com/browse/JRASERVER-69793; https://jira.atlassian.com/browse/JRASERVER-69793
CVE: CVE-2019-16224
Published: 2019-09-11
Description: An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20initialization%20vuln; https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20initialization%20vuln
CVE: CVE-2019-16225
Published: 2019-09-11
Description: An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20write%20to%20illegal%20address; https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20write%20to%20illegal%20address
CVE: CVE-2019-16226
Published: 2019-09-11
Description: An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memory%20corruption%20vuln; https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memory%20corruption%20vuln
CVE: CVE-2019-16227
Published: 2019-09-11
Description: An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memcpy%20illegal%20dst; https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20memcpy%20illegal%20dst
CVE: CVE-2019-16228
Published: 2019-09-11
Description: An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: https://github.com/TeamSeri0us/pocs/tree/master/lmdb/FPE; https://github.com/TeamSeri0us/pocs/tree/master/lmdb/FPE
CVE: CVE-2019-3643
Published: 2019-09-11
Description: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies.
CVSS Score: 5.3 (MEDIUM)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10296; https://kc.mcafee.com/corporate/index?page=content&id=SB10296
CVE: CVE-2019-3644
Published: 2019-09-11
Description: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies.
CVSS Score: 7.5 (HIGH)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10296; https://kc.mcafee.com/corporate/index?page=content&id=SB10296
CVE: CVE-2019-16229
Published: 2019-09-11
Description: drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.suse.com/show_bug.cgi?id=1150469#c3; https://lkml.org/lkml/2019/9/9/487; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-16230
Published: 2019-09-11
Description: drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics card occurs during boot. It is not attacker controllable and OOM at that time is highly unlikely
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.suse.com/show_bug.cgi?id=1150468; https://lkml.org/lkml/2019/9/9/487; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-16231
Published: 2019-09-11
Description: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html; https://lkml.org/lkml/2019/9/9/487
CVE: CVE-2019-16232
Published: 2019-09-11
Description: drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/
CVE: CVE-2019-16233
Published: 2019-09-11
Description: drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html; https://lkml.org/lkml/2019/9/9/487
CVE: CVE-2019-16234
Published: 2019-09-11
Description: drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html; http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html; https://lkml.org/lkml/2019/9/9/487
CVE: CVE-2019-16098
Published: 2019-09-11
Description: The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://github.com/Barakat/CVE-2019-16098; https://github.com/Barakat/CVE-2019-16098
CVE: CVE-2019-11777
Published: 2019-09-11
Description: In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346, CWE-346, CWE-755
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934; https://bugs.eclipse.org/bugs/show_bug.cgi?id=549934
CVE: CVE-2019-9488
Published: 2019-09-11
Description: Trend Micro Deep Security Manager (10.x, 11.x) and Vulnerability Protection (2.0) are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager (DSM).
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-611
References: https://success.trendmicro.com/solution/1122900; https://success.trendmicro.com/solution/1122900
CVE: CVE-2019-13473
Published: 2019-09-11
Description: TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://packetstormsecurity.com/files/154416/Dabman-And-Imperial-Web-Radio-Devices-Undocumented-Telnet-Backdoor.html; http://packetstormsecurity.com/files/174503/Internet-Radio-auna-IR-160-SE-UIProto-DoS-XSS-Missing-Authentication.html; http://seclists.org/fulldisclosure/2023/Sep/1
CVE: CVE-2019-14936
Published: 2019-09-11
Description: Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure (Username and Password Hash).
CVSS Score: 5.3 (MEDIUM)
References: https://www.blackdragon.team/contents/index.php/cves/cve-2019-14936/; https://www.blackdragon.team/contents/index.php/cves/cve-2019-14936/
CVE: CVE-2019-16235
Published: 2019-09-11
Description: Dino before 2019-09-10 does not properly check the source of a carbons message in module/xep/0280_message_carbons.vala.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: http://www.openwall.com/lists/oss-security/2019/09/12/5; https://github.com/dino/dino/commit/e84f2c49567e86d2a261ea264d65c4adc549c930; https://gultsch.de/dino_multiple.html
CVE: CVE-2019-16236
Published: 2019-09-11
Description: Dino before 2019-09-10 does not check roster push authorization in module/roster/module.vala.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/09/12/5; https://github.com/dino/dino/commit/dd33f5f949248d87d34f399e8846d5ee5b8823d9; https://gultsch.de/dino_multiple.html
CVE: CVE-2019-16237
Published: 2019-09-11
Description: Dino before 2019-09-10 does not properly check the source of an MAM message in module/xep/0313_message_archive_management.vala.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: http://www.openwall.com/lists/oss-security/2019/09/12/5; https://github.com/dino/dino/commit/307f16cc86dd2b95aa02ab8a85110e4a2d5e7363; https://gultsch.de/dino_multiple.html
CVE: CVE-2019-11769
Published: 2019-09-11
Description: An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these credentials are processed in Teamviewer.exe, which allows any application running in the same non-administrative user context to intercept them in cleartext within process memory. By using this technique, a local attacker is able to obtain administrative credentials in order to elevate privileges. This vulnerability can be exploited by injecting code into Teamviewer.exe which intercepts calls to GetWindowTextW and logs the processed credentials.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://blog.to.com/advisory-teamviewer-cve-2019-11769-2/; https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?type=label&labels=Security; https://blog.to.com/advisory-teamviewer-cve-2019-11769-2/
CVE: CVE-2019-3759
Published: 2019-09-11
Description: The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability to run custom Groovy scripts to gain limited access to view or modify information on the Workflow system.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/158324/RSA-IG-L-Aveksa-7.1.1-Remote-Code-Execution.html; https://community.rsa.com/docs/DOC-106943; http://packetstormsecurity.com/files/158324/RSA-IG-L-Aveksa-7.1.1-Remote-Code-Execution.html
CVE: CVE-2019-3760
Published: 2019-09-11
Description: The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the data by supplying specially crafted input data to the affected application.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-89
References: https://community.rsa.com/docs/DOC-106943; https://community.rsa.com/docs/DOC-106943
CVE: CVE-2019-3761
Published: 2019-09-11
Description: The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a stored cross-site scripting vulnerability in the Access Request module. A remote authenticated malicious user could potentially exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the stored malicious code would gets executed by the web browser in the context of the vulnerable web application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://community.rsa.com/docs/DOC-106943; https://community.rsa.com/docs/DOC-106943
CVE: CVE-2019-3763
Published: 2019-09-11
Description: The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain an information exposure vulnerability. The Office 365 user password may get logged in a plain text format in the Office 365 connector debug log file. An authenticated malicious local user with access to the debug logs may obtain the exposed password to use in further attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-532, CWE-532
References: https://community.rsa.com/docs/DOC-106943; https://community.rsa.com/docs/DOC-106943