diff --git a/advisories/unreviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json b/advisories/github-reviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json similarity index 55% rename from advisories/unreviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json rename to advisories/github-reviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json index f3bb28e6592..c0f7af37b58 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json +++ b/advisories/github-reviewed/2022/05/GHSA-rxfp-8jmr-xc95/GHSA-rxfp-8jmr-xc95.json @@ -1,12 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-rxfp-8jmr-xc95", - "modified": "2022-05-17T02:56:17Z", + "modified": "2023-07-31T21:10:08Z", "published": "2022-05-17T02:56:17Z", "aliases": [ "CVE-2016-4947" ], - "details": "Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.", + "summary": "Cloudera HUE Account Enumeration", + "details": "Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to `desktop/api/users/autocomplete`.", "severity": [ { "type": "CVSS_V3", @@ -14,7 +15,25 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "npm", + "name": "gethue" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "3.9.0" + } + ] + } + ] + } ], "references": [ { @@ -23,11 +42,11 @@ }, { "type": "WEB", - "url": "http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf" + "url": "https://web.archive.org/web/20210123183622/http://www.securityfocus.com/bid/93880" }, { "type": "WEB", - "url": "http://www.securityfocus.com/bid/93880" + "url": "http://2016.hack.lu/archive/2016/Wavestone%20-%20Hack.lu%202016%20-%20Hadoop%20safari%20-%20Hunting%20for%20vulnerabilities%20-%20v1.0.pdf" } ], "database_specific": { @@ -35,8 +54,8 @@ "CWE-200" ], "severity": "MODERATE", - "github_reviewed": false, - "github_reviewed_at": null, + "github_reviewed": true, + "github_reviewed_at": "2023-07-31T21:10:08Z", "nvd_published_at": "2017-03-07T16:59:00Z" } } \ No newline at end of file