ALT-PU-2019-1595

Низкий

ALT-PU-2019-1595: package cacti update to version 1.2.3-alt1

Источник

errata.altlinux.org

Дата публикации

06.04.2019

Дата обновления

06.04.2019

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades cacti to version 1.2.3-alt1.

Устраненные уязвимости1

CVE-2019-11025

Средний 5.4

Дата публикации: 08.04.2019

CWE-79

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

CVSS 3.1

Средний 5.4

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: None

CVSS 2.0

Низкий 3.5

AV:N/AC:M/Au:S/C:N/I:P/A:N

Access vector: Network
Complexity: Medium
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2019-11025 https://nvd.nist.gov/vuln/detail/CVE-2019-11025

Ссылки1

ALT-PU-2019-1595 https://errata.altlinux.org/ALT-PU-2019-1595

Связанные уязвимости

CVE-2019-11025

CVSS3: 5.4

ubuntu

больше 7 лет назад

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

CVE-2019-11025

CVSS3: 5.4

nvd

больше 7 лет назад

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.

CVE-2019-11025

CVSS3: 5.4

debian

больше 7 лет назад

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping o ...

GHSA-p4p8-h9wq-h334

CVSS3: 5.4

github

больше 4 лет назад

In clearFilter() in utilities.php in Cacti before 1.2.3, no escaping occurs before printing out the value of the SNMP community string (SNMP Options) in the View poller cache, leading to XSS.