rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-11251 kubectl cp allows symlink directory traversal
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be used to allow an attacker to place a nefarious file using a symlink, outside of the destination tree.
Problem types: cwe_id: CWE-61
description: CWE-61: UNIX Symbolic Link (Symlink) Following
Affected products: vendor: Kubernetes
product: Kubernetes
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
version: 3.1
Credits: lang: en
value: Erik Sjölund
Published: 2020-02-03T15:35:13.000Z
CVE-2019-11252 Credential leakage when failing to mount
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.
Problem types: cwe_id: CWE-209
description: CWE-209 Information Exposure Through an Error Message
Affected products: vendor: Kubernetes
product: Kubernetes
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Christopher J. Ruwe
Published: 2020-07-23T14:47:38.187Z
CVE-2019-11253 Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack
Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Kubernetes
product: Kubernetes
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Rory McCune
Published: 2019-10-17T15:40:10.154Z
CVE-2019-11254 Kubernetes API Server denial of service vulnerability from malicious YAML payloads
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.
Problem types: cwe_id: CWE-1050
description: CWE-1050: Excessive Platform Resource Consumption within a Loop
Affected products: vendor: Kubernetes
product: Kubernetes
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Mike Danese of Google
Published: 2020-04-01T20:30:15.907Z
CVE-2019-11255 Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, restore from snapshot, cloning and resizing operations.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Kubernetes
product: kubernetes-csi external-provisioner
vendor: Kubernetes
product: kubernetes-csi external-snapshotter
vendor: Kubernetes
product: kubernetes-csi external-resizer
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
version: 3.1
Credits: lang: en
value: Xiangqian Yu
Published: 2019-12-05T16:05:18.735Z
CVE-2019-11268 UAA SQL Identity Zone Vulnerability
Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic read privileges for one identity zone can extend those reading privileges to all other identity zones and obtain private information on users, clients, and groups in all other identity zones.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Cloud Foundry
product: UAA Release (OSS)
Published: 2019-07-11T18:11:36.916Z
CVE-2019-11269 Open Redirector in spring-security-oauth2
Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an authorization code. A malicious user or attacker can craft a request to the authorization endpoint using the authorization code grant type, and specify a manipulated redirection URI via the redirect_uri parameter. This can cause the authorization server to redirect the resource owner user-agent to a URI under the control of the attacker with the leaked authorization code.
Problem types: cwe_id: CWE-601
description: CWE-601: Open Redirect
Affected products: vendor: Spring
product: Spring Security OAuth
Published: 2019-06-12T14:46:18.601Z
CVE-2019-11270 UAA clients.write vulnerability
Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Cloud Foundry
product: UAA Release (OSS)
Published: 2019-08-05T16:21:54.798Z
CVE-2019-11271 Bosh Deployment logs leak sensitive information
Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user may read any credentials that are contained in a BOSH manifest.
Problem types: cwe_id: CWE-532
description: CWE-532: Information Exposure Through Log Files
Affected products: vendor: Cloud Foundry
product: BOSH
Published: 2019-06-18T23:38:15.403Z
CVE-2019-11272 PlaintextPasswordEncoder authenticates encoded passwords that are null
Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user has a null encoded password, a malicious user (or attacker) can authenticate using a password of "null".
Problem types: cwe_id: CWE-287
description: CWE-287: Improper Authentication - Generic
Affected products: vendor: Spring
product: Spring Security
Published: 2019-06-26T14:06:15.312Z
CVE-2019-11273 PKS Telemetry logs credentials
Pivotal Container Services (PKS) versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information.
Problem types: cwe_id: CWE-532
description: CWE-532: Information Exposure Through Log Files
Affected products: vendor: Pivotal
product: Pivotal Container Service (PKS)
Published: 2019-07-23T22:34:08.022Z
CVE-2019-11274 UAA SCIM Filter XSS
Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack. A remote unauthenticated malicious attacker could craft a URL that contains a SCIM filter that contains malicious JavaScript, which older browsers may execute.
Problem types: cwe_id: CWE-79
description: CWE-79: Cross-site Scripting (XSS) - Generic
Affected products: vendor: Cloud Foundry
product: UAA Release (OSS)
Published: 2019-08-09T19:22:17.731Z
CVE-2019-11275 CSV Injection in usage report downloaded from Pivotal Application Manager
Pivotal Application Manager, versions 666.0.x prior to 666.0.36, versions 667.0.x prior to 667.0.22, versions 668.0.x prior to 668.0.21, versions 669.0.x prior to 669.0.13, and versions 670.0.x prior to 670.0.7, contain a vulnerability where a remote authenticated user can create an app with a name such that a csv program can interpret into a formula and gets executed. The malicious user can possibly gain access to a usage report that requires a higher privilege.
Problem types: cwe_id: CWE-74
description: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products: vendor: Pivotal
product: Apps Manager
Published: 2019-10-01T14:17:40.183Z
CVE-2019-11276 Apps Manager sends tokens to Spring apps via HTTP
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.16, 2.4.x prior to 2.4.12, 2.5.x prior to 2.5.8, and 2.6.x prior to 2.6.3, makes a request to the /cloudapplication endpoint via Spring actuator, and subsequent requests via unsecured http. An adjacent unauthenticated user could eavesdrop on the network traffic and gain access to the unencrypted token allowing the attacker to read the type of access a user has over an app. They may also modify the logging level, potentially leading to lost information that would otherwise have been logged.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Pivotal
product: Pivotal Application Service (PAS)
Published: 2019-08-19T14:49:27.910Z
CVE-2019-11277 Volume Services is vulnerable to an LDAP injection attack
Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.
Problem types: cwe_id: CWE-90
description: CWE-90: LDAP Injection
Affected products: vendor: Cloud Foundry
product: CF NFS volume release
vendor: Cloud Foundry
product: CF Deployment
Published: 2019-09-23T17:40:18.215Z
CVE-2019-11278 Privilege Escalation via Blind SCIM Injection in UAA
CF UAA versions prior to 74.1.0, allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft a SCIM query, which leaks information that allows an escalation of privileges, ultimately allowing the malicious user to gain control of UAA scopes they should not have.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection - Generic
Affected products: vendor: Cloud Foundry
product: UAA Release (OSS)
Published: 2019-09-26T21:11:24.033Z
CVE-2019-11279 Privilege Escalation via Scope Manipulation in UAA
CF UAA versions prior to 74.1.0 can request scopes for a client that shouldn't be allowed by submitting an array of requested scopes. A remote malicious user can escalate their own privileges to any scope, allowing them to take control of UAA and the resources it controls.
Problem types: cwe_id: CWE-77
description: CWE-77: Command Injection - Generic
Affected products: vendor: Cloud Foundry
product: UAA Release (OSS)
Published: 2019-09-26T21:15:10.245Z
CVE-2019-11280 Privilege escalation through the invitations service
Pivotal Apps Manager, included in Pivotal Application Service versions 2.3.x prior to 2.3.18, 2.4.x prior to 2.4.14, 2.5.x prior to 2.5.10, and 2.6.x prior to 2.6.5, contains an invitations microservice which allows users to invite others to their organizations. A remote authenticated user can gain additional privileges by inviting themselves to spaces that they should not have access to.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Pivotal
product: Pivotal Application Service (PAS)
Published: 2019-09-20T18:35:17.756Z
CVE-2019-11281 RabbitMQ XSS attack
Pivotal RabbitMQ, versions prior to v3.7.18, and RabbitMQ for PCF, versions 1.15.x prior to 1.15.13, versions 1.16.x prior to 1.16.6, and versions 1.17.x prior to 1.17.3, contain two components, the virtual host limits page, and the federation management UI, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack that would gain access to virtual hosts and policy management information.
Problem types: cwe_id: CWE-79
description: CWE-79: Cross-site Scripting (XSS) - Generic
Affected products: vendor: Pivotal
product: RabbitMQ
vendor: Pivotal
product: RabbitMQ for PCF
Published: 2019-10-16T15:23:47.309Z
CVE-2019-11282 UAA is vulnerable to a Blind SCIM injection leading to information disclosure
Cloud Foundry UAA, versions prior to v74.3.0, contains an endpoint that is vulnerable to SCIM injection attack. A remote authenticated malicious user with scim.invite scope can craft a request with malicious content which can leak information about users of the UAA.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Cloud Foundry
product: UAA Release
vendor: Cloud Foundry
product: CF Deployment
Published: 2019-10-23T15:28:24.395Z
CVE-2019-11283 Password leak in smbdriver logs
Cloud Foundry SMB Volume, versions prior to v2.0.3, accidentally outputs sensitive information to the logs. A remote user with access to the SMB Volume logs can discover the username and password for volumes that have been recently created, allowing the user to take control of the SMB Volume.
Problem types: cwe_id: CWE-532
description: CWE-532: Inclusion of Sensitive Information in Log Files
Affected products: vendor: Cloud Foundry
product: SMB Volume
vendor: Cloud Foundry
product: CF Deployment
Published: 2019-10-23T15:32:22.206Z
CVE-2019-11284 Reactor Netty authentication leak in redirects
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
Problem types: cwe_id: CWE-522
description: CWE-522: Insufficiently Protected Credentials
Affected products: vendor: Pivotal
product: Reactor Netty
Published: 2019-10-17T17:40:12.123Z
CVE-2019-11286 JMX Credential Deserialization in GemFire
VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against the service with a crafted set of credentials leading to remote code execution.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: VMware Tanzu
product: VMware GemFire
vendor: VMware Tanzu
product: VMware Tanzu GemFire for VMs
Published: 2020-07-31T19:40:19.094Z
CVE-2019-11287 RabbitMQ Web Management Plugin DoS via heap overflow
Pivotal RabbitMQ, versions 3.7.x prior to 3.7.21 and 3.8.x prior to 3.8.1, and RabbitMQ for Pivotal Platform, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain a web management plugin that is vulnerable to a denial of service attack. The "X-Reason" HTTP Header can be leveraged to insert a malicious Erlang format string that will expand and consume the heap, resulting in the server crashing.
Problem types: cwe_id: CWE-400
description: CWE-400: Denial of Service
Affected products: vendor: Pivotal
product: RabbitMQ for Pivotal Platform
vendor: Pivotal
product: RabbitMQ
Published: 2019-11-22T23:26:08.880Z
CVE-2019-11288 tcServer JMX Socket Listener Registry Rebinding Local Privilege Escalation
In Pivotal tc Server, 3.x versions prior to 3.2.19 and 4.x versions prior to 4.0.10, and Pivotal tc Runtimes, 7.x versions prior to 7.0.99.B, 8.x versions prior to 8.5.47.A, and 9.x versions prior to 9.0.27.A, when a tc Runtime instance is configured with the JMX Socket Listener, a local attacker without access to the tc Runtime process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and gain complete control over the tc Runtime instance.
Problem types: cwe_id: CWE-269
description: CWE-269: Improper Privilege Management
Affected products: vendor: Pivotal
product: Pivotal tc Server 4.x
vendor: Pivotal
product: Pivotal tc Server 3.x
vendor: Pivotal
product: Pivotal tc Server 4.x Runtimes
vendor: Pivotal
product: Pivotal tc Server 3.x Runtimes
Published: 2020-01-27T18:50:13.211Z
CVE-2019-11289 A forged route service request using an invalid nonce can cause the gorouter to panic and crash
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Cloud Foundry
product: Routing
Published: 2019-11-19T18:41:04.566Z
CVE-2019-11290 Cloud Foundry UAA logs query parameters in tomcat access file
Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.
Problem types: cwe_id: CWE-532
description: CWE-532: Inclusion of Sensitive Information in Log Files
Affected products: vendor: Cloud Foundry
product: UAA Release
Published: 2019-11-25T23:56:17.082Z
CVE-2019-11291 RabbitMQ XSS attack via federation and shovel endpoints
Pivotal RabbitMQ, 3.7 versions prior to v3.7.20 and 3.8 version prior to v3.8.1, and RabbitMQ for PCF, 1.16.x versions prior to 1.16.7 and 1.17.x versions prior to 1.17.4, contain two endpoints, federation and shovel, which do not properly sanitize user input. A remote authenticated malicious user with administrative access could craft a cross site scripting attack via the vhost or node name fields that could grant access to virtual hosts and policy management information.
Problem types: cwe_id: CWE-79
description: CWE-79: Cross-site Scripting (XSS) - Generic
Affected products: vendor: Pivotal
product: RabbitMQ
vendor: Pivotal
product: RabbitMQ for Pivotal Platform
Published: 2019-11-22T22:56:08.641Z
CVE-2019-11292 Pivotal Ops Manager logs query parameters in tomcat access file
Pivotal Ops Manager, versions 2.4.x prior to 2.4.27, 2.5.x prior to 2.5.24, 2.6.x prior to 2.6.16, and 2.7.x prior to 2.7.5, logs all query parameters to tomcat’s access file. If the query parameters are used to provide authentication, ie. credentials, then they will be logged as well.
Problem types: cwe_id: CWE-532
description: CWE-532: Inclusion of Sensitive Information in Log Files
Affected products: vendor: Pivotal
product: Pivotal Ops Manager
Published: 2020-01-08T23:55:12.316Z
CVE-2019-11293 UAA logs all query parameters with debug logging level
Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A remote authenticated malicious user could gain access to user credentials via the uaa.log file if authentication is provided via query parameters.
Problem types: cwe_id: CWE-532
description: CWE-532: Inclusion of Sensitive Information in Log Files
Affected products: vendor: Cloud Foundry
product: UAA Release
Published: 2019-12-06T20:00:17.131Z
CVE-2019-11294 CAPI leaks service broker URLs and GUIDs to space developers
Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins.
Problem types: cwe_id: CWE-200
description: CWE-200: Information Exposure
Affected products: vendor: Cloud Foundry
product: CAPI
Published: 2019-12-19T19:35:11.666Z
CVE-2019-11318 
Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-27T18:23:27.000Z
CVE-2019-11319 
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function downloadFirmware in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T16:46:36.000Z
CVE-2019-11320 
In Motorola CX2 1.01 and M2 1.01, users can access the router's /priv_mgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T16:47:00.000Z
CVE-2019-11321 
An issue was discovered in Motorola CX2 1.01 and M2 1.01. The router opens TCP port 8010. Users can send hnap requests to this port without authentication to obtain information such as the MAC addresses of connected client devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T16:47:34.000Z
CVE-2019-11322 
An issue was discovered in Motorola CX2 1.01 and M2 1.01. There is a command injection in the function startRmtAssist in hnap, which leads to remote code execution via shell metacharacters in a JSON value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T16:47:47.000Z
CVE-2019-11323 
HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/ssl_sock.h error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-09T13:42:28.000Z
CVE-2019-11324 
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use of the ssl_context, ca_certs, or ca_certs_dir argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-04-18T00:00:00.000Z
CVE-2019-11325 
An issue was discovered in Symfony before 4.2.12 and 4.3.x before 4.3.8. The VarExport component incorrectly escapes strings, allowing some specially crafted ones to escalate to execution of arbitrary PHP code. This is related to symfony/var-exporter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-21T22:15:55.000Z