Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
af6e65a3 by Salvatore Bonaccorso at 2022-04-27T10:14:41+02:00
Process some CVEs for zammad, itp'ed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -409,9 +409,9 @@ CVE-2022-29703
CVE-2022-29702
RESERVED
CVE-2022-29701 (A lack of rate limiting in the 'forgot password' feature of
Zammad v5. ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2022-29700 (A lack of password length restriction in Zammad v5.1.0 allows
for the ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2022-29699
RESERVED
CVE-2022-29698
@@ -6824,9 +6824,9 @@ CVE-2022-27334
CVE-2022-27333 (idcCMS v1.10 was discovered to contain an issue which allows
attackers ...)
NOT-FOR-US: idcCMS
CVE-2022-27332 (An access control issue in Zammad v5.0.3 allows attackers to
write ent ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2022-27331 (An access control issue in Zammad v5.0.3 broadcasts
administrative con ...)
- TODO: check
+ - zammad <itp> (bug #841355)
CVE-2022-27330
RESERVED
CVE-2022-27329
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af6e65a367fbcbacf4fe0e5ce01151516ad7c248
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/af6e65a367fbcbacf4fe0e5ce01151516ad7c248
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
