Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
39f78857 by Salvatore Bonaccorso at 2022-09-04T10:21:54+02:00
Lower severity for CVE-2022-36640
If InfluxDB is deployed on publicly accessible endpoint, it is
recommended to enable authentication.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8146,7 +8146,9 @@ CVE-2022-36642 (A local file disclosure vulnerability in
/appConfig/userDB.json
CVE-2022-36641
RESERVED
CVE-2022-36640 (** DISPUTED ** influxData influxDB before v1.8.10 contains no
authenti ...)
- - influxdb <unfixed>
+ - influxdb <unfixed> (unimportant)
+ NOTE: If InfluxDB is deployed on publicly accessible endpoint, it is
recommended
+ NOTE: to enable authentication.
TODO: check, research on fixing commits in 1.8.10
CVE-2022-36639 (A stored cross-site scripting (XSS) vulnerability in
/client.php of Ga ...)
NOT-FOR-US: Garage Management System
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/39f7885786b01805451796afca59e3bf546bb15e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/39f7885786b01805451796afca59e3bf546bb15e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
