From 0093aadb0b7fa315dbff93a27702fcad5e007d2e Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 16 Feb 2024 06:32:43 +0000 Subject: [PATCH] Publish Advisories GHSA-vjwp-mggj-92gq GHSA-2352-52mf-hwj3 --- .../GHSA-vjwp-mggj-92gq.json | 10 ++++- .../GHSA-2352-52mf-hwj3.json | 38 +++++++++++++++++++ 2 files changed, 47 insertions(+), 1 deletion(-) create mode 100644 advisories/unreviewed/2024/02/GHSA-2352-52mf-hwj3/GHSA-2352-52mf-hwj3.json diff --git a/advisories/unreviewed/2022/06/GHSA-vjwp-mggj-92gq/GHSA-vjwp-mggj-92gq.json b/advisories/unreviewed/2022/06/GHSA-vjwp-mggj-92gq/GHSA-vjwp-mggj-92gq.json index 47b35a4512a..758f87b5c75 100644 --- a/advisories/unreviewed/2022/06/GHSA-vjwp-mggj-92gq/GHSA-vjwp-mggj-92gq.json +++ b/advisories/unreviewed/2022/06/GHSA-vjwp-mggj-92gq/GHSA-vjwp-mggj-92gq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vjwp-mggj-92gq", - "modified": "2022-06-17T00:01:28Z", + "modified": "2024-02-16T06:31:29Z", "published": "2022-06-10T00:00:54Z", "aliases": [ "CVE-2019-25067" @@ -21,6 +21,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25067" }, + { + "type": "WEB", + "url": "https://github.com/containers/podman/issues/21628" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.143949" + }, { "type": "WEB", "url": "https://vuldb.com/?id.143949" diff --git a/advisories/unreviewed/2024/02/GHSA-2352-52mf-hwj3/GHSA-2352-52mf-hwj3.json b/advisories/unreviewed/2024/02/GHSA-2352-52mf-hwj3/GHSA-2352-52mf-hwj3.json new file mode 100644 index 00000000000..0f6bab9a8ea --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2352-52mf-hwj3/GHSA-2352-52mf-hwj3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2352-52mf-hwj3", + "modified": "2024-02-16T06:31:30Z", + "published": "2024-02-16T06:31:30Z", + "aliases": [ + "CVE-2023-6451" + ], + "details": "Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6451" + }, + { + "type": "WEB", + "url": "https://www.themissinglink.com.au/security-advisories/cve-2023-6451" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1394" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-16T04:15:08Z" + } +} \ No newline at end of file