Bug#963161: lynis: CVE-2019-13033

2020-06-22 Thread Salvatore Bonaccorso
Control: severity -1 minor Hi Marc, On Mon, Jun 22, 2020 at 04:33:42PM +0900, Marc Dequènes (duck) wrote: > Quack, > > On 2020-06-20 03:34, Salvatore Bonaccorso wrote: > > > CVE-2019-13033[0]: > > | In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by > > | looking at the

Bug#963161: lynis: CVE-2019-13033

2020-06-22 Thread duck
Quack, On 2020-06-20 03:34, Salvatore Bonaccorso wrote: CVE-2019-13033[0]: | In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by | looking at the process list when a data upload is being performed. | This license can be used to upload data to a central Lynis server. |

Bug#963161: lynis: CVE-2019-13033

2020-06-19 Thread Salvatore Bonaccorso
Source: lynis Version: 2.7.5-1 Severity: important Tags: security upstream Control: found -1 2.6.2-1 Control: found -1 2.4.0-1 Hi, The following vulnerability was published for lynis. CVE-2019-13033[0]: | In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by | looking at the