From 4c9126c8624720fe38eb42e9c9efc4228d2ade8d Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 2 Feb 2024 16:00:49 +0000
Subject: [PATCH] Publish Advisories

GHSA-g44j-7vp3-68cv
GHSA-3vvc-v8c2-43r7
---
 .../2022/02/GHSA-g44j-7vp3-68cv/GHSA-g44j-7vp3-68cv.json | 4 ++--
 .../2024/01/GHSA-3vvc-v8c2-43r7/GHSA-3vvc-v8c2-43r7.json | 9 ++++++---
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2022/02/GHSA-g44j-7vp3-68cv/GHSA-g44j-7vp3-68cv.json b/advisories/github-reviewed/2022/02/GHSA-g44j-7vp3-68cv/GHSA-g44j-7vp3-68cv.json
index 3364970f1ec..067fd87b92a 100644
--- a/advisories/github-reviewed/2022/02/GHSA-g44j-7vp3-68cv/GHSA-g44j-7vp3-68cv.json
+++ b/advisories/github-reviewed/2022/02/GHSA-g44j-7vp3-68cv/GHSA-g44j-7vp3-68cv.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-g44j-7vp3-68cv",
-  "modified": "2021-05-19T22:08:41Z",
+  "modified": "2024-02-02T15:59:34Z",
   "published": "2022-02-15T01:57:18Z",
   "aliases": [
     "CVE-2015-3629"
@@ -80,6 +80,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2021-05-19T22:08:41Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2015-05-18T15:59:15Z"
   }
 }
\ No newline at end of file
diff --git a/advisories/github-reviewed/2024/01/GHSA-3vvc-v8c2-43r7/GHSA-3vvc-v8c2-43r7.json b/advisories/github-reviewed/2024/01/GHSA-3vvc-v8c2-43r7/GHSA-3vvc-v8c2-43r7.json
index 00bbfd8b9e0..484a38020a4 100644
--- a/advisories/github-reviewed/2024/01/GHSA-3vvc-v8c2-43r7/GHSA-3vvc-v8c2-43r7.json
+++ b/advisories/github-reviewed/2024/01/GHSA-3vvc-v8c2-43r7/GHSA-3vvc-v8c2-43r7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3vvc-v8c2-43r7",
-  "modified": "2024-01-29T22:29:38Z",
+  "modified": "2024-02-02T15:59:47Z",
   "published": "2024-01-29T15:30:25Z",
   "aliases": [
     "CVE-2023-29055"
@@ -9,7 +9,10 @@
   "summary": "Apache Kylin has Insufficiently Protected Credentials",
   "details": "In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP (or other plain text protocol), it is possible for network sniffers to hijack the HTTP payload and get access to the content of kylin.properties and potentially the containing credentials.\n\nTo avoid this threat, users are recommended to \n\n  *  Always turn on HTTPS so that network payload is encrypted.\n\n  *  Avoid putting credentials in kylin.properties, or at least not in plain text.\n  *  Use network firewalls to protect the serverside such that it is not accessible to external attackers.\n\n  *  Upgrade to version Apache Kylin 4.0.4, which filters out the sensitive content that goes to the Server Config web interface.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
   ],
   "affected": [
     {
@@ -58,7 +61,7 @@
     "cwe_ids": [
       "CWE-522"
     ],
-    "severity": "MODERATE",
+    "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2024-01-29T22:29:38Z",
     "nvd_published_at": "2024-01-29T13:15:07Z"