[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc068a7c by Salvatore Bonaccorso at 2020-04-15T22:50:34+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15540,7 +15540,7 @@ CVE-2020-5352
 CVE-2020-5351
 	RESERVED
 CVE-2020-5350 (Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2,  ...)
-	TODO: check
+	NOT-FOR-US: EMC
 CVE-2020-5349
 	RESERVED
 CVE-2020-5348 (Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a  ...)
@@ -18233,7 +18233,7 @@ CVE-2020-4296
 CVE-2020-4295
 	RESERVED
 CVE-2020-4294 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4293
 	RESERVED
 CVE-2020-4292 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and  ...)
@@ -18273,19 +18273,19 @@ CVE-2020-4276 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 tradition
 CVE-2020-4275
 	RESERVED
 CVE-2020-4274 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4273 (IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attack ...)
 	NOT-FOR-US: IBM
 CVE-2020-4272 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to inc ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4271 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4270 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain esc ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4269 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, suc ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4268 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scriptin ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4267
 	RESERVED
 CVE-2020-4266
@@ -72271,7 +72271,7 @@ CVE-2019-4656 (IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and
 CVE-2019-4655 (IBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is  ...)
 	NOT-FOR-US: IBM
 CVE-2019-4654 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly va ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4653
 	RESERVED
 CVE-2019-4652 (IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file per ...)
@@ -72391,9 +72391,9 @@ CVE-2019-4596 (IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.
 CVE-2019-4595 (IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 c ...)
 	NOT-FOR-US: IBM
 CVE-2019-4594 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obt ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4593 (IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that incl ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4592 (IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow ...)
 	NOT-FOR-US: IBM
 CVE-2019-4591



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc068a7c99c39ad40eb5bf4ef251f1daed3c356c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc068a7c99c39ad40eb5bf4ef251f1daed3c356c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200415/000606ab/attachment.html>