CVE-2019-3686

XSS in distri and version parameter in openQA

openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Suse

Products

Openqa

CVE-2019-3685

Missing TLS certificate validation for HTTPS connections in osc

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Opensuse

Products

Open Build Service

CVE-2019-3684

susemanager installer creates world-readable swap files

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Suse

Products

Manager

CVE-2019-3683

keystone_json_assignment backend granted access to any project for users in user-project-map.json

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete arbitrary resources, contrary to expectations.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Hp Suse

Products

Helion Openstack Keystone-json-assignment Openstack Cloud

CVE-2019-3682

Insecure API port exposed to all Master Node guest containers

The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1_ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Suse

Products

Caas Platform

CVE-2019-3681

osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Opensuse Suse

Products

Factory Leap Osc and 2 more

CVE-2019-3670

Remote Code Execution vulnerability

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.

CVSS 3.1 · 8 High EPSS 1.2% KEV · Not listed

Vendors

Mcafee

Products

Web Advisor

CVE-2019-3667

DLL Search Order Hijacking

DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Techcheck

CVE-2019-3666

API Abuse Vulnerability

API Abuse/Misuse vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to navigate to restricted websites via a carefully crafted web site.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Mcafee

Products

Webadvisor

CVE-2019-3665

Code Injection vulnerability

Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully crafted web site.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Webadvisor

CVE-2019-3663

Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3662

Advanced Threat Defense (ATD) - Path Traversal: '/absolute/pathname/here' vulnerability

Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3661

Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3660

Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

CVSS 3.1 · 8.4 High EPSS 1.2% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3654

Client Proxy (MCP) - Authentication Bypass vulnerability

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee Microsoft

Products

Client Proxy Windows

CVE-2019-3653

ESConfig Tool access not controlled

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Endpoint Security

CVE-2019-3652

ENS code injection in EPSetup.exe

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee Microsoft

Products

Endpoint Security Windows

CVE-2019-3651

Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3650

Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense

CVE-2019-3649

Advanced Threat Defense (ATD) - Information Disclosure vulnerability

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Mcafee

Products

Advanced Threat Defense