"-Synchronized-Data."

jasnow · Apr 15, 2020 · 60189d5 · 60189d5
1 parent 56cc105
commit 60189d5
Show file tree

Hide file tree

Showing 32 changed files with 4,312 additions and 4,129 deletions.
diff --git a/2019/10xxx/CVE-2019-10068.json b/2019/10xxx/CVE-2019-10068.json
@@ -34,7 +34,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "An issue was discovered in Kentico before 12.0.15. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted."
+                "value": "An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service to bypass the initial authentication and proceed to deserialize user-controlled .NET object input. This deserialization then led to unauthenticated remote code execution on the server where the Kentico instance was hosted."
             }
         ]
     },

diff --git a/2019/4xxx/CVE-2019-4593.json b/2019/4xxx/CVE-2019-4593.json
@@ -1,100 +1,100 @@
 {
-   "impact" : {
-      "cvssv3" : {
-         "BM" : {
-            "SCORE" : "4.300",
-            "C" : "L",
-            "AV" : "N",
-            "UI" : "N",
-            "PR" : "L",
-            "AC" : "L",
-            "I" : "N",
-            "A" : "N",
-            "S" : "U"
-         },
-         "TM" : {
-            "E" : "U",
-            "RL" : "O",
-            "RC" : "C"
-         }
-      }
-   },
-   "CVE_data_meta" : {
-      "ASSIGNER" : "psirt@us.ibm.com",
-      "DATE_PUBLIC" : "2020-04-14T00:00:00",
-      "ID" : "CVE-2019-4593",
-      "STATE" : "PUBLIC"
-   },
-   "affects" : {
-      "vendor" : {
-         "vendor_data" : [
-            {
-               "vendor_name" : "IBM",
-               "product" : {
-                  "product_data" : [
-                     {
-                        "product_name" : "Qradar",
-                        "version" : {
-                           "version_data" : [
-                              {
-                                 "version_value" : "7.3.3.Patch1"
-                              }
-                           ]
-                        }
-                     },
-                     {
-                        "version" : {
-                           "version_data" : [
-                              {
-                                 "version_value" : "7.3.0"
-                              }
-                           ]
-                        },
-                        "product_name" : "QRadar"
-                     }
-                  ]
-               }
+    "impact": {
+        "cvssv3": {
+            "BM": {
+                "SCORE": "4.300",
+                "C": "L",
+                "AV": "N",
+                "UI": "N",
+                "PR": "L",
+                "AC": "L",
+                "I": "N",
+                "A": "N",
+                "S": "U"
+            },
+            "TM": {
+                "E": "U",
+                "RL": "O",
+                "RC": "C"
             }
-         ]
-      }
-   },
-   "description" : {
-      "description_data" : [
-         {
-            "lang" : "eng",
-            "value" : "IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system.  IBM X-ForceID:  167743."
-         }
-      ]
-   },
-   "references" : {
-      "reference_data" : [
-         {
-            "name" : "https://www.ibm.com/support/pages/node/6189729",
-            "title" : "IBM Security Bulletin 6189729 (Qradar)",
-            "refsource" : "CONFIRM",
-            "url" : "https://www.ibm.com/support/pages/node/6189729"
-         },
-         {
-            "name" : "ibm-qradar-cve20194593-info-disc (167743)",
-            "refsource" : "XF",
-            "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/167743",
-            "title" : "X-Force Vulnerability Report"
-         }
-      ]
-   },
-   "data_type" : "CVE",
-   "data_version" : "4.0",
-   "problemtype" : {
-      "problemtype_data" : [
-         {
-            "description" : [
-               {
-                  "lang" : "eng",
-                  "value" : "Obtain Information"
-               }
+        }
+    },
+    "CVE_data_meta": {
+        "ASSIGNER": "psirt@us.ibm.com",
+        "DATE_PUBLIC": "2020-04-14T00:00:00",
+        "ID": "CVE-2019-4593",
+        "STATE": "PUBLIC"
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "IBM",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Qradar",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "7.3.3.Patch1"
+                                        }
+                                    ]
+                                }
+                            },
+                            {
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_value": "7.3.0"
+                                        }
+                                    ]
+                                },
+                                "product_name": "QRadar"
+                            }
+                        ]
+                    }
+                }
             ]
-         }
-      ]
-   },
-   "data_format" : "MITRE"
-}
+        }
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-ForceID: 167743."
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "name": "https://www.ibm.com/support/pages/node/6189729",
+                "title": "IBM Security Bulletin 6189729 (Qradar)",
+                "refsource": "CONFIRM",
+                "url": "https://www.ibm.com/support/pages/node/6189729"
+            },
+            {
+                "name": "ibm-qradar-cve20194593-info-disc (167743)",
+                "refsource": "XF",
+                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/167743",
+                "title": "X-Force Vulnerability Report"
+            }
+        ]
+    },
+    "data_type": "CVE",
+    "data_version": "4.0",
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "Obtain Information"
+                    }
+                ]
+            }
+        ]
+    },
+    "data_format": "MITRE"
+}