[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Sat Nov 9 08:47:41 GMT 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a61e5b3 by Salvatore Bonaccorso at 2019-11-09T08:47:00Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43414,7 +43414,7 @@ CVE-2019-4647
 CVE-2019-4646
 	RESERVED
 CVE-2019-4645 (IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripti ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4644
 	RESERVED
 CVE-2019-4643
@@ -43542,7 +43542,7 @@ CVE-2019-4583
 CVE-2019-4582
 	RESERVED
 CVE-2019-4581 (IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4580
 	RESERVED
 CVE-2019-4579
@@ -43592,7 +43592,7 @@ CVE-2019-4558 (A security vulnerability has been identified in all levels of IBM
 CVE-2019-4557
 	RESERVED
 CVE-2019-4556 (IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting fo ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4555
 	RESERVED
 CVE-2019-4554
@@ -43686,7 +43686,7 @@ CVE-2019-4511
 CVE-2019-4510
 	RESERVED
 CVE-2019-4509 (IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authoriza ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4508
 	RESERVED
 CVE-2019-4507
@@ -43764,7 +43764,7 @@ CVE-2019-4472
 CVE-2019-4471
 	RESERVED
 CVE-2019-4470 (IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4469
 	RESERVED
 CVE-2019-4468
@@ -43796,7 +43796,7 @@ CVE-2019-4456 (IBM Daeja ViewONE Professional, Standard & Virtual 5.0.5 and
 CVE-2019-4455
 	RESERVED
 CVE-2019-4454 (IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4453
 	RESERVED
 CVE-2019-4452
@@ -43804,7 +43804,7 @@ CVE-2019-4452
 CVE-2019-4451
 	RESERVED
 CVE-2019-4450 (IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. T ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4449
 	RESERVED
 CVE-2019-4448 (IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1 ...)
@@ -43880,9 +43880,9 @@ CVE-2019-4414
 CVE-2019-4413
 	RESERVED
 CVE-2019-4412 (IBM Cognos Controller stores sensitive information in URL parameters.  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4411 (IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow a ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4410 (IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19. ...)
 	NOT-FOR-US: IBM
 CVE-2019-4409 (HCL Traveler versions 9.x and earlier are susceptible to cross-site sc ...)
@@ -44036,7 +44036,7 @@ CVE-2019-4336 (IBM Robotic Process Automation with Automation Anywhere 11 uses a
 CVE-2019-4335
 	RESERVED
 CVE-2019-4334 (IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4333
 	RESERVED
 CVE-2019-4332
@@ -105688,7 +105688,7 @@ CVE-2018-1723 (IBM Spectrum Scale 4.1.1.0, 4.1.1.20, 4.2.0.0, 4.2.3.10, 5.0.0 an
 CVE-2018-1722 (IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow  ...)
 	NOT-FOR-US: IBM
 CVE-2018-1721 (IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Ent ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2018-1720 (IBM Sterling B2B Integrator Standard Edition 5.2.0.1, 5.2.6.3_6, 6.0.0 ...)
 	NOT-FOR-US: IBM
 CVE-2018-1719 (IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a61e5b385a8e48ecac4445f1b0370f9d44d1a87

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a61e5b385a8e48ecac4445f1b0370f9d44d1a87
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191109/0bea3135/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list