[Secure-testing-commits] r49964 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-23 12:54:20 +0000 (Thu, 23 Mar 2017)
New Revision: 49964

Modified:
   data/CVE/list
Log:
NFUs


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-23 11:23:50 UTC (rev 49963)
+++ data/CVE/list	2017-03-23 12:54:20 UTC (rev 49964)
@@ -1,5 +1,5 @@
 CVE-2017-7235 (An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A ...)
-	TODO: check
+	NOT-FOR-US: cloudflare-scrape
 CVE-2017-7234
 	RESERVED
 CVE-2017-7233
@@ -19696,11 +19696,11 @@
 CVE-2016-9170
 	RESERVED
 CVE-2016-9169 (A reflected XSS vulnerability exists in the web console of the Document ...)
-	TODO: check
+	NOT-FOR-US: Novell
 CVE-2016-9168 (A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in ...)
-	TODO: check
+	NOT-FOR-US: Novell
 CVE-2016-9167 (NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP ...)
-	TODO: check
+	NOT-FOR-US: Novell
 CVE-2016-9166
 	RESERVED
 CVE-2016-9165 (The get_sessions servlet in CA Unified Infrastructure Management ...)
@@ -30585,29 +30585,29 @@
 CVE-2016-5759
 	RESERVED
 CVE-2016-5758 (A cross site request forgery protection mechanism in NetIQ Access ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5757 (iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5756 (Multiple components of the web tools in NetIQ Access Manager 4.1 before ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5755 (NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5754 (Presence of a .htaccess file could leak information in NetIQ Access ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5753
 	RESERVED
 CVE-2016-5752 (The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5751 (An unfiltered finalizer target URL in the SAML processing feature in ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5750 (The certificate upload feature in iManager in NetIQ Access Manager 4.1 ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5749 (NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5748 (External Entity Processing (XXE) vulnerability in the "risk score" ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-5747 (A security vulnerability in cookie handling in the http stack ...)
-	TODO: check
+	NOT-FOR-US: Novell
 CVE-2016-5746 (libstorage, libstorage-ng, and yast-storage improperly store ...)
 	NOT-FOR-US: libstorage
 CVE-2016-5745 (F5 BIG-IP LTM systems 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before ...)
@@ -44857,9 +44857,9 @@
 CVE-2016-1604
 	RESERVED
 CVE-2016-1603 (An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-1602 (A code injection in the supportconfig data collection tool in ...)
-	TODO: check
+	NOT-FOR-US: SLES support tool
 CVE-2016-1601 (yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, ...)
 	NOT-FOR-US: yast2-users / SuSE YAST
 CVE-2016-1600
@@ -44869,7 +44869,7 @@
 CVE-2016-1598 (XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows ...)
 	NOT-FOR-US: NetIQ IDM
 CVE-2016-1597 (A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could ...)
-	TODO: check
+	NOT-FOR-US: NetIQ
 CVE-2016-1596 (Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus ...)
 	NOT-FOR-US: Micro Focus
 CVE-2016-1595 (LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in ...)