netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-92cg-ghq6-9587
GHSA-gcgw-q47m-prvj
This commit is contained in:
advisory-database[bot]
2024-09-30 18:53:45 +00:00
parent ff502561f3
commit 6672f4ba3e
2 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/12/GHSA-92cg-ghq6-9587/GHSA-92cg-ghq6-9587.json
+7 -5
View File
@@ -1,13 +1,14 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92cg-ghq6-9587",
"modified": "2024-05-20T22:00:25Z",
"modified": "2024-09-30T18:52:24Z",
"published": "2023-12-12T03:31:45Z",
"withdrawn": "2024-09-30T18:52:24Z",
"aliases": [
"CVE-2023-50424"
],
"summary": "Privilege escalation in sap/cloud-security-client-go",
"details": "SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n",
"summary": "Duplicate Advisory: Privilege escalation in sap/cloud-security-client-go",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-m8rw-rcpq-2vp2. This link is maintained to preserve external references.\n\n## Original Description\nSAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n",
"severity": [
{
"type": "CVSS_V3",
@@ -72,7 +73,8 @@
"database_specific": {
"cwe_ids": [
"CWE-269",
"CWE-639"
"CWE-639",
"CWE-749"
],
"severity": "CRITICAL",
"github_reviewed": true,
advisories/github-reviewed/2023/12/GHSA-gcgw-q47m-prvj/GHSA-gcgw-q47m-prvj.json
+7 -5
View File
@@ -1,13 +1,14 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gcgw-q47m-prvj",
"modified": "2024-01-09T18:25:39Z",
"modified": "2024-09-30T18:52:44Z",
"published": "2023-12-12T03:31:45Z",
"withdrawn": "2024-09-30T18:52:44Z",
"aliases": [
"CVE-2023-50422"
],
"summary": "Improper JWT Signature Validation in SAP Security Services Library ",
"details": "SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n",
"summary": "Duplicate Advisory: Improper JWT Signature Validation in SAP Security Services Library ",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-59c9-pxq8-9c73. This link is maintained to preserve external references.\n\n## Original Description\nSAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n",
"severity": [
{
"type": "CVSS_V3",
@@ -175,7 +176,8 @@
"database_specific": {
"cwe_ids": [
"CWE-269",
"CWE-639"
"CWE-639",
"CWE-749"
],
"severity": "CRITICAL",
"github_reviewed": true,