Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
e4ca9aab by Salvatore Bonaccorso at 2020-01-28T21:25:05+01:00
Process some IBM specific CVEs as NFU

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9105,7 +9105,7 @@ CVE-2020-4209
 CVE-2020-4208
        RESERVED
 CVE-2020-4207 (IBM Watson IoT Message Gateway 2.0.0.x, 5.0.0.0, 5.0.0.1, and 
5.0.0.2  ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2020-4206
        RESERVED
 CVE-2020-4205
@@ -61869,7 +61869,7 @@ CVE-2019-4709
 CVE-2019-4708
        RESERVED
 CVE-2019-4707 (IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to 
an XML  ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4706
        RESERVED
 CVE-2019-4705
@@ -61925,7 +61925,7 @@ CVE-2019-4681
 CVE-2019-4680
        RESERVED
 CVE-2019-4679 (IBM Content Navigator 3.0CD could allow an authenticated user 
to gain  ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4678
        RESERVED
 CVE-2019-4677
@@ -62005,23 +62005,23 @@ CVE-2019-4641
 CVE-2019-4640
        RESERVED
 CVE-2019-4639 (IBM Security Secret Server 10.7 uses weaker than expected 
cryptographi ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4638 (IBM Security Secret Server 10.7 does not set the secure 
attribute on a ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4637 (IBM Security Secret Server 10.7 uses incomplete blacklisting 
for input ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4636 (IBM Security Secret Server 10.7 could disclose sensitive 
information t ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4635 (IBM Security Secret Server 10.7 could allow a privileged user 
to perfo ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4634
        RESERVED
 CVE-2019-4633 (IBM Security Secret Server 10.7 could allow an attacker to 
obtain sens ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4632 (IBM Security Secret Server 10.7 is vulnerable to cross-site 
scripting. ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4631 (IBM Security Secret Server 10.7 could allow a remote attacker 
to condu ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4630
        RESERVED
 CVE-2019-4629
@@ -62043,7 +62043,7 @@ CVE-2019-4622
 CVE-2019-4621 (IBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 
through 2 ...)
        NOT-FOR-US: IBM
 CVE-2019-4620 (IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker 
to bypas ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4619
        RESERVED
 CVE-2019-4618
@@ -62055,7 +62055,7 @@ CVE-2019-4616
 CVE-2019-4615
        RESERVED
 CVE-2019-4614 (IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting 
to a Que ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4613
        RESERVED
 CVE-2019-4612 (IBM Planning Analytics 2.0 is vulnerable to malicious file 
upload in t ...)
@@ -62147,7 +62147,7 @@ CVE-2019-4570 (IBM Tivoli Netcool Impact 7.1.0 through 
7.1.0.16 generates an err
 CVE-2019-4569 (IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is 
vulnerable to cr ...)
        NOT-FOR-US: IBM
 CVE-2019-4568 (IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a 
remote attac ...)
-       TODO: check
+       NOT-FOR-US: IBM
 CVE-2019-4567
        RESERVED
 CVE-2019-4566 (IBM Security Key Lifecycle Manager 3.0 and 3.0.1 stores user 
credentia ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4ca9aabe35cd542a7128484361c83ccbf26c349

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4ca9aabe35cd542a7128484361c83ccbf26c349
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to