rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-3330 
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to obtain specific files in the product.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP2
default_status: unknown
vendor: NEC Corporation
product: Aterm WG2600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP2
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1400HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WF300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9500N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9300N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8750N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8700N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8600N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8370N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8175N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8170N
default_status: unaffected
Credits: lang: en
value: Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.
Published: 2023-06-28T01:13:03.181Z
CVE-2023-3331 
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to delete

 specific files in the product.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP2
default_status: unknown
vendor: NEC Corporation
product: Aterm WG2600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP2
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1400HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WF300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9500N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9300N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8750N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8700N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8600N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8370N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8175N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8170N
default_status: unaffected
Credits: lang: en
value: Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.
Published: 2023-06-28T01:19:45.378Z
CVE-2023-3332 
Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to 

execute an arbitrary script, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Problem types: cwe_id: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP2
default_status: unknown
vendor: NEC Corporation
product: Aterm WG2600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP2
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1400HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WF300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9500N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9300N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8750N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8700N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8600N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8370N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8175N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8170N
default_status: unaffected
Credits: lang: en
value: Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.
Published: 2023-06-28T01:25:03.905Z
CVE-2023-3333 
Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a attacker to execute an arbitrary OS command with the root privilege, after obtaining a high privilege exploiting CVE-2023-3330 and CVE-2023-3331 vulnerabilities.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command
Affected products: vendor: NEC Corporation
product: Aterm WG2600HP2
default_status: unknown
vendor: NEC Corporation
product: Aterm WG2600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG2200HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP2
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1800HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG1400HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG600HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WG300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WF300HP
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9500N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR9300N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8750N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8700N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8600N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8370N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8175N
default_status: unaffected
vendor: NEC Corporation
product: Aterm WR8170N
default_status: unaffected
Credits: lang: en
value: Mr. Taizoh Tsukamoto in Mitsui Bussan Secure Directions, Inc.
Published: 2023-06-28T01:33:27.976Z
CVE-2023-3335 Information Exposure Vulnerability in Hitachi Ops Center Administrator
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users  to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00.


Problem types: cwe_id: CWE-532
description: CWE-532 Insertion of Sensitive Information into Log File
Affected products: vendor: Hitachi
product: Hitachi Ops Center Administrator
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
Published: 2023-10-03T01:02:47.466Z
CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability
TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may allow a remote attacker to determine whether a user is valid during password recovery through the web login page and enable a brute force attack with valid users.


Problem types: cwe_id: CWE-204
description: CWE-204 Observable Response Discrepancy
Affected products: vendor: Moxa
product: TN-5900 Series
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2023-07-05T09:11:54.255Z
CVE-2023-3337 PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication
A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The attack can be launched remotely. The identifier VDB-232009 was assigned to this vulnerability.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: PuneethReddyHC
product: Online Shopping System Advanced
CVSS v3.1: version: 3.1
baseScore: 7.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
baseSeverity: HIGH
Credits: lang: en
value: kr1shna4garwal (VulDB User)
Published: 2023-06-20T12:00:04.541Z
CVE-2023-3338 Crash due to a null pointer dereference in the dn_nsp_send function
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.
Problem types: cwe_id: CWE-476
description: NULL Pointer Dereference
Affected products: vendor: n/a
product: kernel
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/o:redhat:enterprise_linux:9
default_status: unaffected
vendor: Fedora
product: Fedora
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Red Hat would like to thank Davide Ornaghi (Betrusted Srl) for reporting this issue.
Published: 2023-06-30T00:00:00.000Z
CVE-2023-3339 code-projects Agro-School Management System exam-delete.php sql injection
A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232015.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: code-projects
product: Agro-School Management System
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: RMgX (VulDB User)
Published: 2023-06-21T06:31:03.287Z
CVE-2023-3340 SourceCodester Online School Fees System GET Parameter ajx.php sql injection
A vulnerability was found in SourceCodester Online School Fees System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajx.php of the component GET Parameter Handler. The manipulation of the argument name_startsWith leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-232016.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: SourceCodester
product: Online School Fees System
CVSS v3.1: version: 3.1
baseScore: 6.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
baseSeverity: MEDIUM
Credits: lang: en
value: zhangyf (VulDB User)
Published: 2023-06-20T15:31:03.370Z
CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.
This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
Affected products: vendor: ISC
product: BIND 9
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
baseScore: 7.5
baseSeverity: HIGH
Credits: lang: en
value: ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for bringing this vulnerability to our attention.
Published: 2023-09-20T12:32:03.073Z
CVE-2023-3342 User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in version 3.0.2 and fully patched in version 3.0.2.1.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: wpeverest
product: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
baseScore: 9.9
baseSeverity: CRITICAL
Credits: lang: en
value: István Márton
Published: 2023-07-13T02:04:15.320Z
CVE-2023-3343 User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: wpeverest
product: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
default_status: unaffected
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 8.8
baseSeverity: HIGH
Credits: lang: en
value: István Márton
Published: 2023-07-13T02:04:14.751Z
CVE-2023-3344 Auto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting
The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Problem types: description: CWE-79 Cross-Site Scripting (XSS)
Affected products: vendor: Unknown
product: Auto Location for WP Job Manager via Google
default_status: unaffected
Credits: lang: en
value: Bob Matyas
lang: en
value: WPScan
Published: 2023-07-24T10:20:24.383Z
CVE-2023-3345 LMS by Masteriyo < 1.6.8 - Information Exposure
The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students
Problem types: description: CWE-863 Incorrect Authorization
Affected products: vendor: Unknown
product: LMS by Masteriyo
default_status: unaffected
Credits: lang: en
value: Yassir Sbai Fahim
lang: en
value: WPScan
Published: 2023-07-31T09:37:36.423Z
CVE-2023-3346 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M800V Series M800VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M800V Series M800VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M80V Series M80V
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M80V Series M80VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M800 Series M800W
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M800 Series M800S
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M80 Series M80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M80 Series M80W
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC E80 Series E80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC C80 Series C80
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M720VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M730VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M750VW
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M720VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M730VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M700V Series M750VS
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC M70V Series M70V
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC E70 Series E70
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC IoT Unit Remote Service Gateway Unit
default_status: unaffected
vendor: Mitsubishi Electric Corporation
product: MITSUBISHI CNC IoT Unit Data Acquisition Unit
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2023-08-03T04:00:43.294Z
CVE-2023-3347 Samba: smb2 packet signing is not enforced when "server signing = required" is set
A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is mandatory. This flaw allows an attacker to perform attacks, such as a man-in-the-middle attack, by intercepting the network traffic and modifying the SMB2 messages between client and server, affecting the integrity of the data.
Problem types: cwe_id: CWE-347
description: Improper Verification of Cryptographic Signature
Affected products: vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::baseos
cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/a:redhat:enterprise_linux:8::crb
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 8
cpes: cpe:/o:redhat:enterprise_linux:8::baseos
cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/a:redhat:enterprise_linux:8::crb
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/a:redhat:enterprise_linux:9::resilientstorage
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 9
cpes: cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/a:redhat:enterprise_linux:9::resilientstorage
default_status: affected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
cpes: cpe:/o:redhat:enterprise_linux:6
default_status: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 7
cpes: cpe:/o:redhat:enterprise_linux:7
default_status: unaffected
vendor: Red Hat
product: Red Hat Storage 3
cpes: cpe:/a:redhat:storage:3
default_status: unknown
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
Published: 2023-07-20T14:54:05.525Z