Weekly Update: a new vulnerability is published on the National Vulnerability Database (31 items)

New vulnerabilities from the NVD: CVE-2019-4589 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449. Published at: August 03, 2020 at 04:15PM View on website August 03, 2020 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-4366 IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748. Published at: August 03, 2020 at 04:15PM View on website August 03, 2020 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19455 Wowza Streaming Engine through 2019-11-28 has Insecure Permissions. Published at: August 03, 2020 at 05:15PM View on website August 03, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19453 Wowza Streaming Engine through 2019-11-28 allows XSS (issue 1 of 2). Published at: August 03, 2020 at 05:15PM View on website August 03, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2015-9549 A reflected Cross-site Scripting (XSS) vulnerability exists in OcPortal 9.0.20 via the OCF_EMOTICON_CELL.tpl FIELD_NAME field to data/emoticons.php. Published at: August 03, 2020 at 07:15PM View on website August 03, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11584 A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. Published at: August 04, 2020 at 12:15AM View on website August 04, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11583 A GET-based XSS reflected vulnerability in Plesk Obsidian 18.0.17 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter. Published at: August 04, 2020 at 12:15AM View on website August 04, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-20001 An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges. Published at: August 04, 2020 at 04:15PM View on website August 04, 2020 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13523 An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Published at: August 04, 2020 at 10:15PM View on website August 04, 2020 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13522 An exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability. Published at: August 04, 2020 at 11:15PM View on website August 05, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2017-18112 Affected versions of Atlassian Fisheye allow remote attackers to view the HTTP password of a repository via an Information Disclosure vulnerability in the logging feature. The affected versions are before version 4.8.3. Published at: August 05, 2020 at 07:15AM View on website August 05, 2020 at 08:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13151 Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query. It attempts to restrict code execution by disabling os.execute() calls, but this is insufficient. Anyone with network access can use a crafted UDF to execute arbitrary OS commands on all nodes of the cluster at the permission level of the user running the Aerospike service. Published at: August 05, 2020 at 04:15PM View on website August 05, 2020 at 05:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14347 A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable. Published at: August 05, 2020 at 05:15PM View on website August 05, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-14344 An integer overflow leading to a heap-buffer overflow was found in The X Input Method (XIM) client was implemented in libX11 before version 1.6.10. As per upstream this is security relevant when setuid programs call XIM client functions while running with elevated privileges. No such programs are shipped with Red Hat Enterprise Linux. Published at: August 05, 2020 at 05:15PM View on website August 05, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13921 **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases. Published at: August 05, 2020 at 05:15PM View on website August 05, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13819 Extreme EAC Appliance 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request. Published at: August 05, 2020 at 05:15PM View on website August 05, 2020 at 07:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15106 In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL. Published at: August 05, 2020 at 10:15PM View on website August 05, 2020 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13404 The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection. Published at: August 06, 2020 at 12:15AM View on website August 06, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13365 Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0. Published at: August 06, 2020 at 08:15PM View on website August 06, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13364 A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0. Published at: August 06, 2020 at 08:15PM View on website August 06, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13793 Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key. Published at: August 06, 2020 at 10:15PM View on website August 06, 2020 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-12441 Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet. Published at: August 06, 2020 at 10:15PM View on website August 06, 2020 at 11:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-15114 In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint can become stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway. Published at: August 07, 2020 at 02:15AM View on website August 07, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11937 In whoopsie, parse_report() from whoopsie.c allows a local attacker to cause a denial of service via a crafted file. The DoS is caused by resource exhaustion due to a memory leak. Fixed in 0.2.52.5ubuntu0.5, 0.2.62ubuntu0.5 and 0.2.69ubuntu0.1. Published at: August 07, 2020 at 02:15AM View on website August 07, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11993 Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers. Published at: August 07, 2020 at 07:15PM View on website August 07, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11985 IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020. Published at: August 07, 2020 at 07:15PM View on website August 07, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11984 Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE Published at: August 07, 2020 at 07:15PM View on website August 07, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-11852 DKIM key management page vulnerability on Micro Focus Secure Messaging Gateway (SMG). Affecting all SMG Appliance running releases prior to July 2020. The vulnerability could allow a logged in user with rights to generate DKIM key information to inject system commands into the call to the DKIM system command. Published at: August 07, 2020 at 07:15PM View on website August 07, 2020 at 09:36PM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2020-13376 SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie. Published at: August 07, 2020 at 11:15PM View on website August 08, 2020 at 01:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-7005 A vulnerability was discovered in the web interface component of IP Office that may potentially allow a remote, unauthenticated user with network access to gain sensitive information. Affected versions of IP Office include: 9.x, 10.0 through 10.1.0.7 and 11.0 through 11.0.4.2. Published at: August 08, 2020 at 01:15AM View on website August 08, 2020 at 03:36AM via National Vulnerability Database New vulnerabilities from the NVD: CVE-2019-19704 In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. Published at: August 09, 2020 at 12:15AM View on website August 09, 2020 at 01:36AM via National Vulnerability Database