GSD-2022-1008334 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008280 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008213 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...

GSD-2022-1008132 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1008022 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.156 by commit...

GSD-2022-1007695 tcp: cdg: allow tcp_cdg_release() to be called multiple times

tcp: cdg: allow tcpcdgrelease to be called multiple times This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-35950 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.2 through v6.0.9 Description: The issue allows the tcp cdg release function to be called multiple times. This is a potential security concern, although the actual impact and attack plausibility have not yet been prove...

PT-2022-36133 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue allows the tcp cdg release function to be called multiple times. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact...

PT-2022-36468 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue allows the tcp cdg release function to be called multiple times. This is a potential security concern, although the actual impact and attack plausibility have not yet been proven...

PT-2022-36535 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue allows the tcp cdg release function to be called multiple times. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact...

PT-2022-36589 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.334 Description: The issue allows the tcp cdg release function to be called multiple times. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact...

PT-2022-36277 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.156 Description: The issue allows the tcp cdg release function to be called multiple times. This is a potential security concern, although the actual impact and attack plausibility have not yet been proven...

cdg.go.kr Cross Site Scripting vulnerability OBB-2921619

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Directory traversal

CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal...

CVE-2017-18636

CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal...

CVE-2017-18636

CVE-2017-18636 describes a directory traversal vulnerability in CDG through 2017-01-01, exploitable via downloadDocument.jsp?command=download&pathAndName=. Red Hat and NVD entries corroborate the issue; however, the provided documents do not specify affected products, versions beyond the CDG refe...

Design/Logic Flaw

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...