From eac6cedcda4de9fd0a2884733b12bf63b069fa6b Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 17 Feb 2024 00:32:53 +0000 Subject: [PATCH] Publish Advisories GHSA-3xcm-h7jg-4xm5 GHSA-4367-pw62-mx9j GHSA-4c2f-665c-x845 GHSA-62c8-7p5q-m59c GHSA-mc27-8ccr-v5m9 GHSA-pfv6-3f5p-j5c6 GHSA-qhj6-7r5w-cm2f GHSA-rpr9-6rwm-4w63 GHSA-vxrh-jfch-hqcf --- .../GHSA-3xcm-h7jg-4xm5.json | 38 +++++++++++++++++++ .../GHSA-4367-pw62-mx9j.json | 1 + .../GHSA-4c2f-665c-x845.json | 9 ++++- .../GHSA-62c8-7p5q-m59c.json | 4 +- .../GHSA-mc27-8ccr-v5m9.json | 38 +++++++++++++++++++ .../GHSA-pfv6-3f5p-j5c6.json | 35 +++++++++++++++++ .../GHSA-qhj6-7r5w-cm2f.json | 2 +- .../GHSA-rpr9-6rwm-4w63.json | 4 +- .../GHSA-vxrh-jfch-hqcf.json | 11 ++++-- 9 files changed, 131 insertions(+), 11 deletions(-) create mode 100644 advisories/unreviewed/2024/02/GHSA-3xcm-h7jg-4xm5/GHSA-3xcm-h7jg-4xm5.json create mode 100644 advisories/unreviewed/2024/02/GHSA-mc27-8ccr-v5m9/GHSA-mc27-8ccr-v5m9.json create mode 100644 advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json diff --git a/advisories/unreviewed/2024/02/GHSA-3xcm-h7jg-4xm5/GHSA-3xcm-h7jg-4xm5.json b/advisories/unreviewed/2024/02/GHSA-3xcm-h7jg-4xm5/GHSA-3xcm-h7jg-4xm5.json new file mode 100644 index 00000000000..bdf00ee87d1 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3xcm-h7jg-4xm5/GHSA-3xcm-h7jg-4xm5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3xcm-h7jg-4xm5", + "modified": "2024-02-17T00:31:38Z", + "published": "2024-02-17T00:31:38Z", + "aliases": [ + "CVE-2024-21983" + ], + "details": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 \nare susceptible to a Denial of Service (DoS) vulnerability. Successful \nexploit by an authenticated attacker could lead to an out of memory \ncondition or node reboot.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21983" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20240216-0012" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-16T23:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-4367-pw62-mx9j/GHSA-4367-pw62-mx9j.json b/advisories/unreviewed/2024/02/GHSA-4367-pw62-mx9j/GHSA-4367-pw62-mx9j.json index b215fce4492..61107d79fca 100644 --- a/advisories/unreviewed/2024/02/GHSA-4367-pw62-mx9j/GHSA-4367-pw62-mx9j.json +++ b/advisories/unreviewed/2024/02/GHSA-4367-pw62-mx9j/GHSA-4367-pw62-mx9j.json @@ -32,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-400", "CWE-434" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2024/02/GHSA-4c2f-665c-x845/GHSA-4c2f-665c-x845.json b/advisories/unreviewed/2024/02/GHSA-4c2f-665c-x845/GHSA-4c2f-665c-x845.json index 0bf3bd408cf..bedfd1102b6 100644 --- a/advisories/unreviewed/2024/02/GHSA-4c2f-665c-x845/GHSA-4c2f-665c-x845.json +++ b/advisories/unreviewed/2024/02/GHSA-4c2f-665c-x845/GHSA-4c2f-665c-x845.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4c2f-665c-x845", - "modified": "2024-02-09T18:31:07Z", + "modified": "2024-02-17T00:31:38Z", "published": "2024-02-09T03:33:11Z", "aliases": [ "CVE-2024-22318" @@ -32,11 +32,16 @@ { "type": "WEB", "url": "http://packetstormsecurity.com/files/177069/IBM-i-Access-Client-Solutions-Remote-Credential-Theft.html" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Feb/7" } ], "database_specific": { "cwe_ids": [ - "CWE-200" + "CWE-200", + "CWE-384" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-62c8-7p5q-m59c/GHSA-62c8-7p5q-m59c.json b/advisories/unreviewed/2024/02/GHSA-62c8-7p5q-m59c/GHSA-62c8-7p5q-m59c.json index 8076cfb34d6..3593140c0ba 100644 --- a/advisories/unreviewed/2024/02/GHSA-62c8-7p5q-m59c/GHSA-62c8-7p5q-m59c.json +++ b/advisories/unreviewed/2024/02/GHSA-62c8-7p5q-m59c/GHSA-62c8-7p5q-m59c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-62c8-7p5q-m59c", - "modified": "2024-02-10T09:30:19Z", + "modified": "2024-02-17T00:31:38Z", "published": "2024-02-10T09:30:19Z", "aliases": [ "CVE-2024-0596" @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-mc27-8ccr-v5m9/GHSA-mc27-8ccr-v5m9.json b/advisories/unreviewed/2024/02/GHSA-mc27-8ccr-v5m9/GHSA-mc27-8ccr-v5m9.json new file mode 100644 index 00000000000..637fc67c473 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-mc27-8ccr-v5m9/GHSA-mc27-8ccr-v5m9.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mc27-8ccr-v5m9", + "modified": "2024-02-17T00:31:38Z", + "published": "2024-02-17T00:31:38Z", + "aliases": [ + "CVE-2024-21984" + ], + "details": "StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 \nare susceptible to a difficult to exploit Reflected Cross-Site Scripting\n (XSS) vulnerability. Successful exploit requires the attacker to know \nspecific information about the target instance and trick a privileged \nuser into clicking a specially crafted link. This could allow the \nattacker to view or modify configuration settings or add or modify user \naccounts. \n\n\n\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21984" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20240216-0013" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-16T23:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json b/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json new file mode 100644 index 00000000000..f260037f464 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pfv6-3f5p-j5c6", + "modified": "2024-02-17T00:31:38Z", + "published": "2024-02-17T00:31:38Z", + "aliases": [ + "CVE-2023-45918" + ], + "details": "ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45918" + }, + { + "type": "WEB", + "url": "https://lists.gnu.org/archive/html/bug-ncurses/2023-06/msg00005.html" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-16T22:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-qhj6-7r5w-cm2f/GHSA-qhj6-7r5w-cm2f.json b/advisories/unreviewed/2024/02/GHSA-qhj6-7r5w-cm2f/GHSA-qhj6-7r5w-cm2f.json index 023de89f73f..f464b7df19d 100644 --- a/advisories/unreviewed/2024/02/GHSA-qhj6-7r5w-cm2f/GHSA-qhj6-7r5w-cm2f.json +++ b/advisories/unreviewed/2024/02/GHSA-qhj6-7r5w-cm2f/GHSA-qhj6-7r5w-cm2f.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-rpr9-6rwm-4w63/GHSA-rpr9-6rwm-4w63.json b/advisories/unreviewed/2024/02/GHSA-rpr9-6rwm-4w63/GHSA-rpr9-6rwm-4w63.json index 3cfd7f370d4..adeb4aa9ca6 100644 --- a/advisories/unreviewed/2024/02/GHSA-rpr9-6rwm-4w63/GHSA-rpr9-6rwm-4w63.json +++ b/advisories/unreviewed/2024/02/GHSA-rpr9-6rwm-4w63/GHSA-rpr9-6rwm-4w63.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rpr9-6rwm-4w63", - "modified": "2024-02-10T09:30:19Z", + "modified": "2024-02-17T00:31:38Z", "published": "2024-02-10T09:30:19Z", "aliases": [ "CVE-2024-0595" @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-vxrh-jfch-hqcf/GHSA-vxrh-jfch-hqcf.json b/advisories/unreviewed/2024/02/GHSA-vxrh-jfch-hqcf/GHSA-vxrh-jfch-hqcf.json index 2355afcc4a2..32612f8d61d 100644 --- a/advisories/unreviewed/2024/02/GHSA-vxrh-jfch-hqcf/GHSA-vxrh-jfch-hqcf.json +++ b/advisories/unreviewed/2024/02/GHSA-vxrh-jfch-hqcf/GHSA-vxrh-jfch-hqcf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vxrh-jfch-hqcf", - "modified": "2024-02-11T03:30:17Z", + "modified": "2024-02-17T00:31:38Z", "published": "2024-02-11T03:30:17Z", "aliases": [ "CVE-2024-25715" ], "details": "Glewlwyd SSO server 2.x through 2.7.6 allows open redirection via redirect_uri.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-601" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-11T03:15:09Z"