Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:21559
HistorySep 24, 2019 - 12:19 a.m.

Information Disclosure

2019-09-2400:19:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

JSON

cri-o is vulnerable to information disclosure. The vulnerability exists as it does not enforce TLS when sending username+password credentials to token servers leading to credential disclosure.

Related

openvas 5
suse 9
nessus 27
osv 7
prion 1
redhat 7
debiancve 1
cve 1
redhatcve 1
ubuntucve 1
github 1
oraclelinux 5
rocky 2
almalinux 2
openvas
openvas
openSUSE: Security Advisory for skopeo (openSUSE-SU-2019:2159-1)
2019-09-25 00:00:00
openSUSE: Security Advisory for skopeo (openSUSE-SU-2019:2138-1)
2020-01-09 00:00:00
openSUSE: Security Advisory for buildah (openSUSE-SU-2019:2137-1)
2020-01-09 00:00:00
suse
suse
Security update for skopeo (important)
2019-09-15 00:00:00
Security update for podman (moderate)
2019-09-17 00:00:00
Security update for buildah (important)
2019-09-15 00:00:00
nessus
nessus
openSUSE Security Update : podman (openSUSE-2019-2143)
2019-09-17 00:00:00
SUSE SLES15 Security Update : skopeo (SUSE-SU-2019:2340-1)
2019-09-11 00:00:00
openSUSE Security Update : skopeo (openSUSE-2019-2138)
2019-09-16 00:00:00
osv
osv
CVE-2019-10214
2019-11-25 11:15:11
Insufficiently Protected Credentials in github.com/containers/image
2021-04-14 20:04:52
containers/image library Insufficiently Protects Credentials
2022-02-15 01:57:18
prion
prion
Authorization
2019-11-25 11:15:00
redhat
redhat
(RHSA-2019:2825) Moderate: OpenShift Container Platform 4.1.17 cri-o security update
2019-09-25 06:30:05
(RHSA-2019:3812) Moderate: OpenShift Container Platform 3.9 cri-o security update
2019-11-07 16:39:18
(RHSA-2019:3007) Moderate: OpenShift Container Platform 4.1.20 openshift-enterprise-builder-container security update
2019-10-16 17:38:00
debiancve
debiancve
CVE-2019-10214
2019-11-25 11:15:00
cve
cve
CVE-2019-10214
2019-11-25 11:15:00
redhatcve
redhatcve
CVE-2019-10214
2020-01-19 09:45:16
ubuntucve
ubuntucve
CVE-2019-10214
2019-11-25 00:00:00
github
github
containers/image library Insufficiently Protects Credentials
2022-02-15 01:57:18
oraclelinux
oraclelinux
container-tools:ol8 security, bug fix, and enhancement update
2019-11-14 00:00:00
container-tools:1.0 security and bug fix update
2019-11-14 00:00:00
container-tools:2.0 security update
2021-03-05 00:00:00
rocky
rocky
container-tools:1.0 security and bug fix update
2019-11-05 17:52:13
container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57
almalinux
almalinux
Important: container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57
Important: container-tools:1.0 security and bug fix update
2019-11-05 17:52:13

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

JSON
Related for VERACODE:21559
openvas5suse9nessus27osv7prion1redhat7debiancve1cve1redhatcve1ubuntucve1github1oraclelinux5rocky2almalinux2