Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
de813d44 by Salvatore Bonaccorso at 2019-09-29T07:24:21Z
Expand note for CVE-2019-16723/cacti
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -569,6 +569,9 @@ CVE-2019-16723 (In Cacti through 1.2.6, authenticated users
may bypass authoriza
NOTE: https://github.com/Cacti/cacti/issues/2964
NOTE:
https://github.com/Cacti/cacti/commit/7a6a17252a1cbda180b61fff244cb3ce797d5264
NOTE:
https://github.com/Cacti/cacti/commit/c7cf4a26e4848872b48094e67f8d0a01dd7613d2
+ NOTE: The original issue mentions only a bypass via graph_json.php but
there are
+ NOTE: additional permission checks missed while checking the issue
fixed with the
+ NOTE: upstream commits.
CVE-2019-16722 (ZZZCMS zzzphp v1.7.2 has an insufficient protection mechanism
against ...)
NOT-FOR-US: ZZZCMS
CVE-2019-16721 (NoneCMS v1.3 has CSRF in
public/index.php/admin/admin/dele.html, as de ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/de813d44a3ebcfd4b1db783d7ac3e81b154116d9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/de813d44a3ebcfd4b1db783d7ac3e81b154116d9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
