Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3ccafe4a by Salvatore Bonaccorso at 2020-01-21T09:01:10+01:00
Add CVE-2020-7237/cacti
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,9 @@ CVE-2019-20382
CVE-2020-7238
RESERVED
CVE-2020-7237 (Cacti 1.2.8 allows Remote Code Execution (by privileged users)
via she ...)
- TODO: check
+ - cacti <unfixed>
+ NOTE: https://github.com/Cacti/cacti/issues/3201
+ NOTE:
https://github.com/Cacti/cacti/commit/5010719dbd160198be3e07bb994cf237e3af1308
CVE-2020-7236 (UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via
cw2?td= ...)
NOT-FOR-US: UHP UHP-100 devices
CVE-2020-7235 (UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via
cB3?ta= ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3ccafe4a09bab07b2953cb3d94d3d8076bd3b840
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3ccafe4a09bab07b2953cb3d94d3d8076bd3b840
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
