ALT-PU-2018-3699

Высокий

ALT-PU-2018-3699: package sogo update to version 3.2.10.20171010-alt3

Источник

errata.altlinux.org

Дата публикации

25.04.2018

Дата обновления

25.04.2018

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades sogo to version 3.2.10.20171010-alt3.

Устраненные уязвимости3

CVE-2015-5395

Высокий 8.8

Дата публикации: 20.09.2017

CWE-352

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

CVSS 3.1

Высокий 8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Средний 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2015-5395 https://nvd.nist.gov/vuln/detail/CVE-2015-5395

Ссылки1

ALT-PU-2018-3699 https://errata.altlinux.org/ALT-PU-2018-3699

Связанные уязвимости

CVE-2015-5395

CVSS3: 8.8

ubuntu

около 9 лет назад

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

CVE-2015-5395

CVSS3: 8.8

nvd

около 9 лет назад

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

CVE-2015-5395

CVSS3: 8.8

debian

около 9 лет назад

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

GHSA-79jp-f6c4-wq28

CVSS3: 8.8

github

больше 4 лет назад

Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.

CVE-2016-6191

CVSS3: 6.1

ubuntu

больше 9 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Description, (2) Location, (3) URL, or (4) Title field.