Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6bf73fa0 by Moritz Muehlenhoff at 2025-05-13T23:38:30+02:00
auto-nfu: Add rule for Centreon
There's a very old ITP bug for centreon-web, but it has been explicitly
closed with a note that this is no longer pursued.
- - - - -
2 changed files:
- data/CVE/list
- data/packages/nfu.yaml
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,13 +3,13 @@ CVE-2025-4660 (A remote code execution vulnerability exists
in the Windows agent
CVE-2025-4658 (Versions of OpenPubkey library prior to 0.10.0 contained a
vulnerabil ...)
TODO: check
CVE-2025-4649 (Improper Privilege Management vulnerability in Centreon web
allows Pri ...)
- TODO: check
+ NOT-FOR-US: Centreon
CVE-2025-4648 (Download of Code Without Integrity Check vulnerability in
Centreon web ...)
- TODO: check
+ NOT-FOR-US: Centreon
CVE-2025-4647 (Improper Neutralization of Input During Web Page Generation
(XSS or 'C ...)
- TODO: check
+ NOT-FOR-US: Centreon
CVE-2025-4646 (Improper Privilege Management vulnerability in Centreon web
(API Token ...)
- TODO: check
+ NOT-FOR-US: Centreon
CVE-2025-4428 (Remote Code Execution in API component in Ivanti Endpoint
Manager Mobi ...)
NOT-FOR-US: Ivanti
CVE-2025-4427 (An authentication bypass in the API component of Ivanti
Endpoint Manag ...)
=====================================
data/packages/nfu.yaml
=====================================
@@ -37,6 +37,8 @@
cna: brocade
- reason: Canon
cna: Canon
+- reason: Centreon
+ cna: Centreon
- reason: Crestron
cna: Crestron
- reason: Dell / EMC
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6bf73fa02a8da5b4c6707104dbfc1fed531beaaa
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6bf73fa02a8da5b4c6707104dbfc1fed531beaaa
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
