[Bug 1640615] CVE-2018-3258 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1640615
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|81017,reported=20181017,sou |81017,reported=20181017,sou
|rce=internet,cvss3=8.8/CVSS |rce=internet,cvss3=8.8/CVSS
|:3.0/AV:N/AC:L/PR:L/UI:N/S: |:3.0/AV:N/AC:L/PR:L/UI:N/S:
|U/C:H/I:H/A:H,fedora-all/my |U/C:H/I:H/A:H,fedora-all/my
|sql-connector-java=affected |sql-connector-java=affected
|,jdg-7/mysql-connector-java |,jdg-7/mysql-connector-java
|=new,fsw-6/mysql-connector- |=new,fsw-6/mysql-connector-
|java=affected,fuse-7/mysql- |java=affected,fuse-7/mysql-
|connector-java=new,rhsso-7/ |connector-java=affected,rhs
|mysql-connector-java=affect |so-7/mysql-connector-java=a
|ed,rhmap-4/mysql-connector- |ffected,rhmap-4/mysql-conne
|java=defer,rhel-6/mysql-con |ctor-java=defer,rhel-6/mysq
|nector-java=wontfix,rhel-7/ |l-connector-java=wontfix,rh
|mysql-connector-java=affect |el-7/mysql-connector-java=a
|ed,rhn_satellite_6/mysql-co |ffected,rhn_satellite_6/mys
|nnector-java=affected |ql-connector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1640615] CVE-2018-3258 mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1640615
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|81017,reported=20181017,sou |81017,reported=20181017,sou
|rce=internet,cvss3=8.8/CVSS |rce=internet,cvss3=8.8/CVSS
|:3.0/AV:N/AC:L/PR:L/UI:N/S: |:3.0/AV:N/AC:L/PR:L/UI:N/S:
|U/C:H/I:H/A:H,fedora-all/my |U/C:H/I:H/A:H,fedora-all/my
|sql-connector-java=affected |sql-connector-java=affected
|,jdg-7/mysql-connector-java |,jdg-7/mysql-connector-java
|=new,fsw-6/mysql-connector- |=new,fsw-6/mysql-connector-
|java=new,fuse-7/mysql-conne |java=affected,fuse-7/mysql-
|ctor-java=new,rhsso-7/mysql |connector-java=new,rhsso-7/
|-connector-java=affected,rh |mysql-connector-java=affect
|map-4/mysql-connector-java= |ed,rhmap-4/mysql-connector-
|defer,rhel-6/mysql-connecto |java=defer,rhel-6/mysql-con
|r-java=wontfix,rhel-7/mysql |nector-java=wontfix,rhel-7/
|-connector-java=affected,rh |mysql-connector-java=affect
|n_satellite_6/mysql-connect |ed,rhn_satellite_6/mysql-co
|or-java=affected |nnector-java=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1593527] CVE-2018-10862 wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1593527
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80621,reported=20180621,sou |80621,reported=20180621,sou
|rce=internet,cvss3=7.6/CVSS |rce=internet,cvss3=7.6/CVSS
|:3.0/AV:N/AC:L/PR:L/UI:N/S: |:3.0/AV:N/AC:L/PR:L/UI:N/S:
|U/C:L/I:H/A:L,cwe=CWE-22,fe |U/C:L/I:H/A:L,cwe=CWE-22,fe
|dora-all/wildfly-core=affec |dora-all/wildfly-core=affec
|ted,epel-7/wildfly-common=a |ted,epel-7/wildfly-common=a
|ffected,rhev-m-4/eap7-wildf |ffected,rhev-m-4/eap7-wildf
|ly=affected/impact=low,swar |ly=affected/impact=low,swar
|m-7/wildfly=affected,rhsso- |m-7/wildfly=affected,rhsso-
|7/wildfly=affected,jon-3/wi |7/wildfly=affected,jon-3/wi
|ldfly=notaffected,fuse-7/wi |ldfly=notaffected,fuse-7/wi
|ldfly=notaffected,fuse-6/wi |ldfly=notaffected,fuse-6/wi
|ldfly=notaffected,eap-7/wil |ldfly=notaffected,eap-7/wil
|dfly=affected,eap-6/wildfly |dfly=affected,eap-6/wildfly
|=notaffected,jbds-11/wildfl |=notaffected,jbds-11/wildfl
|y=notaffected,jdv-6/wildfly |y=notaffected,jdv-6/wildfly
|=notaffected,jdg-6/wildfly= |=affected,jdg-6/wildfly=not
|notaffected,jdg-7/wildfly=a |affected,jdg-7/wildfly=affe
|ffected,brms-6/wildfly=nota |cted,brms-6/wildfly=notaffe
|ffected,bpms-6/wildfly=nota |cted,bpms-6/wildfly=notaffe
|ffected |cted
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1593527] CVE-2018-10862 wildfly-core: Path traversal can allow the extraction of .war archives to write arbitrary files (Zip Slip)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1593527
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80621,reported=20180621,sou |80621,reported=20180621,sou
|rce=internet,cvss3=7.6/CVSS |rce=internet,cvss3=7.6/CVSS
|:3.0/AV:N/AC:L/PR:L/UI:N/S: |:3.0/AV:N/AC:L/PR:L/UI:N/S:
|U/C:L/I:H/A:L,cwe=CWE-22,fe |U/C:L/I:H/A:L,cwe=CWE-22,fe
|dora-all/wildfly-core=affec |dora-all/wildfly-core=affec
|ted,epel-7/wildfly-common=a |ted,epel-7/wildfly-common=a
|ffected,rhev-m-4/eap7-wildf |ffected,rhev-m-4/eap7-wildf
|ly=affected/impact=low,swar |ly=affected/impact=low,swar
|m-7/wildfly=affected,rhsso- |m-7/wildfly=affected,rhsso-
|7/wildfly=affected,jon-3/wi |7/wildfly=affected,jon-3/wi
|ldfly=notaffected,fuse-7/wi |ldfly=notaffected,fuse-7/wi
|ldfly=notaffected,fuse-6/wi |ldfly=notaffected,fuse-6/wi
|ldfly=notaffected,eap-7/wil |ldfly=notaffected,eap-7/wil
|dfly=affected,eap-6/wildfly |dfly=affected,eap-6/wildfly
|=notaffected,jbds-11/wildfl |=notaffected,jbds-11/wildfl
|y=notaffected,jdv-6/wildfly |y=notaffected,jdv-6/wildfly
|=notaffected,jdg-6/wildfly= |=notaffected,jdg-6/wildfly=
|notaffected,jdg-7/wildfly=n |notaffected,jdg-7/wildfly=a
|otaffected,brms-6/wildfly=n |ffected,brms-6/wildfly=nota
|otaffected,bpms-6/wildfly=n |ffected,bpms-6/wildfly=nota
|otaffected |ffected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1571050] CVE-2018-1271 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1571050
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0405,reported=20180424,sour |0405,reported=20180424,sour
|ce=cve,cvss3=6.5/CVSS:3.0/A |ce=cve,cvss3=6.5/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/
|I:L/A:N,cwe=CWE-22,fedora-a |I:L/A:N,cwe=CWE-22,fedora-a
|ll/springframework=notaffec |ll/springframework=notaffec
|ted,rhel-8/springframework= |ted,rhel-8/springframework=
|notaffected,fsw-6/spring=af |notaffected,fsw-6/spring=af
|fected,fuse-6/spring=wontfi |fected,fuse-6/spring=wontfi
|x,jdv-6/spring=new,brms-5/s |x,jdv-6/spring=affected,brm
|pring=affected,soap-5/sprin |s-5/spring=affected,soap-5/
|g=new,openstack-9/opendayli |spring=affected,openstack-9
|ght=notaffected,openstack-1 |/opendaylight=notaffected,o
|0/opendaylight=notaffected, |penstack-10/opendaylight=no
|openstack-11/opendaylight=n |taffected,openstack-11/open
|otaffected,openstack-12/ope |daylight=notaffected,openst
|ndaylight=notaffected,opens |ack-12/opendaylight=notaffe
|tack-13/opendaylight=notaff |cted,openstack-13/opendayli
|ected,rhes-3/rhevm-dependen |ght=notaffected,rhes-3/rhev
|cies=notaffected,amq-6/spri |m-dependencies=notaffected,
|ng=affected,eap-5/spring=af |amq-6/spring=affected,eap-5
|fected,rhmap-4/spring=new,f |/spring=affected,rhmap-4/sp
|is-2/spring=affected,fuse-7 |ring=new,fis-2/spring=affec
|/spring=affected |ted,fuse-7/spring=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1571050] CVE-2018-1271 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1571050
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0405,reported=20180424,sour |0405,reported=20180424,sour
|ce=cve,cvss3=6.5/CVSS:3.0/A |ce=cve,cvss3=6.5/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/
|I:L/A:N,cwe=CWE-22,fedora-a |I:L/A:N,cwe=CWE-22,fedora-a
|ll/springframework=notaffec |ll/springframework=notaffec
|ted,rhel-8/springframework= |ted,rhel-8/springframework=
|notaffected,fsw-6/spring=ne |notaffected,fsw-6/spring=af
|w,fuse-6/spring=wontfix,jdv |fected,fuse-6/spring=wontfi
|-6/spring=new,brms-5/spring |x,jdv-6/spring=new,brms-5/s
|=affected,soap-5/spring=new |pring=affected,soap-5/sprin
|,openstack-9/opendaylight=n |g=new,openstack-9/opendayli
|otaffected,openstack-10/ope |ght=notaffected,openstack-1
|ndaylight=notaffected,opens |0/opendaylight=notaffected,
|tack-11/opendaylight=notaff |openstack-11/opendaylight=n
|ected,openstack-12/opendayl |otaffected,openstack-12/ope
|ight=notaffected,openstack- |ndaylight=notaffected,opens
|13/opendaylight=notaffected |tack-13/opendaylight=notaff
|,rhes-3/rhevm-dependencies= |ected,rhes-3/rhevm-dependen
|notaffected,amq-6/spring=af |cies=notaffected,amq-6/spri
|fected,eap-5/spring=affecte |ng=affected,eap-5/spring=af
|d,rhmap-4/spring=new,fis-2/ |fected,rhmap-4/spring=new,f
|spring=affected,fuse-7/spri |is-2/spring=affected,fuse-7
|ng=affected |/spring=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1571050] CVE-2018-1271 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1571050
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0405,reported=20180424,sour |0405,reported=20180424,sour
|ce=cve,cvss3=6.5/CVSS:3.0/A |ce=cve,cvss3=6.5/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/
|I:L/A:N,cwe=CWE-22,fedora-a |I:L/A:N,cwe=CWE-22,fedora-a
|ll/springframework=notaffec |ll/springframework=notaffec
|ted,rhel-8/springframework= |ted,rhel-8/springframework=
|notaffected,fsw-6/spring=ne |notaffected,fsw-6/spring=ne
|w,fuse-6/spring=wontfix,jdv |w,fuse-6/spring=wontfix,jdv
|-6/spring=new,brms-5/spring |-6/spring=new,brms-5/spring
|=affected,soap-5/spring=new |=affected,soap-5/spring=new
|,openstack-9/opendaylight=n |,openstack-9/opendaylight=n
|otaffected,openstack-10/ope |otaffected,openstack-10/ope
|ndaylight=notaffected,opens |ndaylight=notaffected,opens
|tack-11/opendaylight=notaff |tack-11/opendaylight=notaff
|ected,openstack-12/opendayl |ected,openstack-12/opendayl
|ight=notaffected,openstack- |ight=notaffected,openstack-
|13/opendaylight=notaffected |13/opendaylight=notaffected
|,rhes-3/rhevm-dependencies= |,rhes-3/rhevm-dependencies=
|notaffected,amq-6/spring=af |notaffected,amq-6/spring=af
|fected,eap-5/spring=new,rhm |fected,eap-5/spring=affecte
|ap-4/spring=new,fis-2/sprin |d,rhmap-4/spring=new,fis-2/
|g=affected,fuse-7/spring=af |spring=affected,fuse-7/spri
|fected |ng=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1571050] CVE-2018-1271 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1571050
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0405,reported=20180424,sour |0405,reported=20180424,sour
|ce=cve,cvss3=6.5/CVSS:3.0/A |ce=cve,cvss3=6.5/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/
|I:L/A:N,cwe=CWE-22,fedora-a |I:L/A:N,cwe=CWE-22,fedora-a
|ll/springframework=notaffec |ll/springframework=notaffec
|ted,rhel-8/springframework= |ted,rhel-8/springframework=
|notaffected,fsw-6/spring=ne |notaffected,fsw-6/spring=ne
|w,fuse-6/spring=wontfix,jdv |w,fuse-6/spring=wontfix,jdv
|-6/spring=new,brms-5/spring |-6/spring=new,brms-5/spring
|=new,soap-5/spring=new,open |=affected,soap-5/spring=new
|stack-9/opendaylight=notaff |,openstack-9/opendaylight=n
|ected,openstack-10/opendayl |otaffected,openstack-10/ope
|ight=notaffected,openstack- |ndaylight=notaffected,opens
|11/opendaylight=notaffected |tack-11/opendaylight=notaff
|,openstack-12/opendaylight= |ected,openstack-12/opendayl
|notaffected,openstack-13/op |ight=notaffected,openstack-
|endaylight=notaffected,rhes |13/opendaylight=notaffected
|-3/rhevm-dependencies=notaf |,rhes-3/rhevm-dependencies=
|fected,amq-6/spring=affecte |notaffected,amq-6/spring=af
|d,eap-5/spring=new,rhmap-4/ |fected,eap-5/spring=new,rhm
|spring=new,fis-2/spring=aff |ap-4/spring=new,fis-2/sprin
|ected,fuse-7/spring=affecte |g=affected,fuse-7/spring=af
|d |fected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month
[Bug 1571050] CVE-2018-1271 spring-framework: Directory traversal vulnerability with static resources on Windows filesystems
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1571050
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0405,reported=20180424,sour |0405,reported=20180424,sour
|ce=cve,cvss3=6.5/CVSS:3.0/A |ce=cve,cvss3=6.5/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:H/ |V:N/AC:H/PR:N/UI:N/S:U/C:H/
|I:L/A:N,cwe=CWE-22,fedora-a |I:L/A:N,cwe=CWE-22,fedora-a
|ll/springframework=notaffec |ll/springframework=notaffec
|ted,rhel-8/springframework= |ted,rhel-8/springframework=
|notaffected,fsw-6/spring=ne |notaffected,fsw-6/spring=ne
|w,fuse-6/spring=wontfix,jdv |w,fuse-6/spring=wontfix,jdv
|-6/spring=new,brms-5/spring |-6/spring=new,brms-5/spring
|=new,soap-5/spring=new,open |=new,soap-5/spring=new,open
|stack-9/opendaylight=notaff |stack-9/opendaylight=notaff
|ected,openstack-10/opendayl |ected,openstack-10/opendayl
|ight=notaffected,openstack- |ight=notaffected,openstack-
|11/opendaylight=notaffected |11/opendaylight=notaffected
|,openstack-12/opendaylight= |,openstack-12/opendaylight=
|notaffected,openstack-13/op |notaffected,openstack-13/op
|endaylight=notaffected,rhes |endaylight=notaffected,rhes
|-3/rhevm-dependencies=notaf |-3/rhevm-dependencies=notaf
|fected,amq-6/spring=new,eap |fected,amq-6/spring=affecte
|-5/spring=new,rhmap-4/sprin |d,eap-5/spring=new,rhmap-4/
|g=new,fis-2/spring=affected |spring=new,fis-2/spring=aff
|,fuse-7/spring=affected |ected,fuse-7/spring=affecte
| |d
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 1 month