[Git][security-tracker-team/security-tracker][master] Add CVE-2019-0227/axis

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d341de18 by Salvatore Bonaccorso at 2019-04-12T06:46:43Z
Add CVE-2019-0227/axis

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29697,8 +29697,10 @@ CVE-2019-0229 (A number of HTTP endpoints in the Airflow webserver (both RBAC an
 	- airflow <itp> (bug #819700)
 CVE-2019-0228
 	RESERVED
-CVE-2019-0227
+CVE-2019-0227 [Hard coded domain name in example web service named StockQuoteService.jws leading to remote code execution]
 	RESERVED
+	- axis <unfixed>
+	NOTE: https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/
 CVE-2019-0226
 	RESERVED
 CVE-2019-0225 (A specially crafted url could be used to access files under the ROOT d ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d341de18914d227696e9ea9762c780985a8f0e51

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d341de18914d227696e9ea9762c780985a8f0e51
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190412/b1c48bfc/attachment.html>