diff --git a/advisories/unreviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json b/advisories/github-reviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json similarity index 55% rename from advisories/unreviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json rename to advisories/github-reviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json index 189e4c0cfc7..11517b71f1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json +++ b/advisories/github-reviewed/2022/05/GHSA-64mc-2m9p-23c8/GHSA-64mc-2m9p-23c8.json @@ -1,17 +1,55 @@ { "schema_version": "1.3.0", "id": "GHSA-64mc-2m9p-23c8", - "modified": "2022-05-17T03:53:35Z", + "modified": "2023-02-08T18:02:49Z", "published": "2022-05-17T03:53:35Z", "aliases": [ "CVE-2014-3663" ], + "summary": "Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs", "details": "Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "1.566" + }, + { + "fixed": "1.583" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.565.3" + } + ] + } + ] + } ], "references": [ { @@ -44,8 +82,8 @@ ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-02-08T18:02:49Z", "nvd_published_at": "2014-10-16T19:55:00Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json b/advisories/github-reviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json similarity index 54% rename from advisories/unreviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json rename to advisories/github-reviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json index c4d58c86f08..82aba841b12 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json +++ b/advisories/github-reviewed/2022/05/GHSA-fxqr-px2m-fvc2/GHSA-fxqr-px2m-fvc2.json @@ -1,17 +1,55 @@ { "schema_version": "1.3.0", "id": "GHSA-fxqr-px2m-fvc2", - "modified": "2022-05-17T03:53:35Z", + "modified": "2023-02-08T18:03:05Z", "published": "2022-05-17T03:53:35Z", "aliases": [ "CVE-2014-3662" ], + "summary": "Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability", "details": "Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.", "severity": [ ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "1.566" + }, + { + "fixed": "1.583" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.jenkins-ci.main:jenkins-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "1.565.3" + } + ] + } + ] + } ], "references": [ { @@ -44,8 +82,8 @@ "CWE-200" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-02-08T18:03:05Z", "nvd_published_at": "2014-10-16T19:55:00Z" } } \ No newline at end of file