Lucene search
GoogleOSV:SUSE-SU-2024:1973-1HistoryJun 11, 2024 - 7:35 a.m.
Security update for rmt-server
2024-06-1107:35:03
Google
osv.dev
rmt-server
security update
cve-2024-28103
v2.17
permissions-policy
bsc#1225997
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
This update for rmt-server fixes the following issues:
- Update to version 2.17
- CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997)
Related
nessus
nessus
SUSE SLES15 Security Update : rmt-server (SUSE-SU-2024:1973-1)
2024-06-12 00:00:00
SUSE SLES15 Security Update : rmt-server (SUSE-SU-2024:2140-1)
2024-06-22 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : rmt-server (SUSE-SU-2024:1974-1)
2024-06-12 00:00:00
osv
osv
Missing security headers in Action Pack on non-HTML responses
2024-06-04 22:26:24
CVE-2024-28103
2024-06-04 20:15:10
Security update for rmt-server
2024-06-11 11:47:29
redhatcve
redhatcve
CVE-2024-28103
2024-06-05 08:30:34
cve
cve
CVE-2024-28103
2024-06-04 20:15:10
cvelist
cvelist
CVE-2024-28103 Action Pack is missing security headers on non-HTML responses
2024-06-04 19:47:44
veracode
veracode
Improper Input Validation
2024-06-06 04:50:05
openvas
openvas
openSUSE: Security Advisory for rmt (SUSE-SU-2024:1974-1)
2024-06-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2140-1)
2024-06-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1986-1)
2024-06-12 00:00:00
vulnrichment
vulnrichment
CVE-2024-28103 Action Pack is missing security headers on non-HTML responses
2024-06-04 19:47:44
github
github
Missing security headers in Action Pack on non-HTML responses
2024-06-04 22:26:24
ubuntucve
ubuntucve
CVE-2024-28103
2024-06-04 00:00:00
rubygems
rubygems
Missing security headers in Action Pack on non-HTML responses
2024-06-03 21:00:00
nvd
nvd
CVE-2024-28103
2024-06-04 20:15:10
debiancve
debiancve
CVE-2024-28103
2024-06-04 20:15:10
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.6
Confidence
High
Related for OSV:SUSE-SU-2024:1973-1