CVE-2019-3816

CVE-2019-3816 affects Openwsman up to 2.6.9, where the daemon’s working directory was incorrectly set to the root, enabling a remote, unauthenticated attacker to disclose arbitrary files via a crafted HTTP request to the Openwsman server. Several connected advisories confirm affected packages and...

CVE-2019-3833

CVE-2019-3833 affects Openwsman versions up to and including 2.6.9. The vulnerability is an infinite loop in process_connection() triggered by parsing specially crafted HTTP requests, enabling a remote, unauthenticated attacker to cause denial of service to the Openwsman server. All available sou...