[Git][security-tracker-team/security-tracker][master] Process NFUs

Salvatore Bonaccorso carnil at debian.org
Tue Feb 4 20:21:17 GMT 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dfb38705 by Salvatore Bonaccorso at 2020-02-04T21:20:14+01:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2020-8615 (A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPres ...)
-	TODO: check
+	NOT-FOR-US: Tutor LMS plugin for WordPress
 CVE-2020-8614
 	RESERVED
 CVE-2020-8613
@@ -9933,7 +9933,7 @@ CVE-2020-4165
 CVE-2020-4164
 	RESERVED
 CVE-2020-4163 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under special ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4162
 	RESERVED
 CVE-2020-4161
@@ -62801,9 +62801,9 @@ CVE-2019-4677
 CVE-2019-4676
 	RESERVED
 CVE-2019-4675 (IBM Security Identity Manager 7.0.1 contains hard-coded credentials, s ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4674 (IBM Security Identity Manager 7.0.1 could allow a remote attacker to t ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4673
 	RESERVED
 CVE-2019-4672
@@ -63027,7 +63027,7 @@ CVE-2019-4564 (IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 is vu
 CVE-2019-4563
 	RESERVED
 CVE-2019-4562 (IBM Security Directory Server 6.4.0 stores sensitive information in UR ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4561 (IBM Security Identity Manager 6.0.0 could allow a remote attacker to e ...)
 	NOT-FOR-US: IBM
 CVE-2019-4560 (IBM MQ and IBM MQ Appliance 9.1 CD, 9.1 LTS, 9.0 LTS, and 8.0 is vulne ...)
@@ -63049,13 +63049,13 @@ CVE-2019-4553
 CVE-2019-4552
 	RESERVED
 CVE-2019-4551 (IBM Security Directory Server 6.4.0 does not perform an authentication ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4550 (IBM Security Directory Server 6.4.0 is deployed with active debugging  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4549 (IBM Security Directory Server 6.4.0 discloses sensitive information to ...)
 	NOT-FOR-US: IBM
 CVE-2019-4548 (IBM Security Directory Server 6.4.0 could allow a remote attacker to h ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4547
 	RESERVED
 CVE-2019-4546 (After installing the IBM Maximo Health- Safety and Environment Manager ...)
@@ -63069,9 +63069,9 @@ CVE-2019-4543
 CVE-2019-4542 (IBM Security Directory Server 6.4.0 is vulnerable to cross-site script ...)
 	NOT-FOR-US: IBM
 CVE-2019-4541 (IBM Security Directory Server 6.4.0 uses incomplete blacklisting for i ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4540 (IBM Security Directory Server 6.4.0 uses weaker than expected cryptogr ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4539 (IBM Security Directory Server 6.4.0 does not properly neutralize speci ...)
 	NOT-FOR-US: IBM
 CVE-2019-4538 (IBM Security Directory Server 6.4.0 could allow a remote attacker to c ...)
@@ -63249,7 +63249,7 @@ CVE-2019-4453
 CVE-2019-4452
 	RESERVED
 CVE-2019-4451 (IBM Security Identity Manager 6.0.0 is vulnerable to cross-site script ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4450 (IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. T ...)
 	NOT-FOR-US: IBM
 CVE-2019-4449



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/dfb38705c75477303a7aebaefcd50a7fc377b8c9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/dfb38705c75477303a7aebaefcd50a7fc377b8c9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200204/0608a472/attachment.html>


More information about the debian-security-tracker-commits mailing list