[Git][security-tracker-team/security-tracker][master] Process more NFUs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff235b62 by Salvatore Bonaccorso at 2020-06-26T22:14:33+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,59 +3,59 @@ CVE-2020-15353
 CVE-2020-15352
 	RESERVED
 CVE-2020-15351 (IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES ...)
-	TODO: check
+	NOT-FOR-US: IDrive
 CVE-2020-15350
 	RESERVED
 CVE-2020-15349
 	RESERVED
 CVE-2020-15348 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManag ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15347 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the q6xV4aW8bQ4cfD-b pa ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15346 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a /live/GLOBALS API wit ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15345 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_g ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15344 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_g ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15343 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_i ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15342 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated zy_i ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15341 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has an unauthenticated upda ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15340 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded opt/axess/A ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15339 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows live/CPEManager/AXCa ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15338 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request M ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15337 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a "Use of GET Request M ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15336 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for / ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15335 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for / ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15334 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows escape-sequence inje ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15333 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows attackers to discove ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15332 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/etc/def ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15331 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded OAUTH_SECRE ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15330 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded APP_KEY in  ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15329 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak Data.fs permission ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15328 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has weak /opt/axess/var/blo ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15327 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without a ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15326 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15325 (Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cook ...)
-	TODO: check
+	NOT-FOR-US: Zyxel
 CVE-2020-15324
 	RESERVED
 CVE-2020-15323
@@ -824,7 +824,7 @@ CVE-2020-14957
 CVE-2020-14956
 	RESERVED
 CVE-2020-14955 (In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows l ...)
-	TODO: check
+	NOT-FOR-US: Jiangmin Antivirus
 CVE-2020-14953
 	RESERVED
 CVE-2020-14952
@@ -1812,7 +1812,7 @@ CVE-2020-14479
 CVE-2020-14478
 	RESERVED
 CVE-2020-14477 (In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX V ...)
-	TODO: check
+	NOT-FOR-US: Philips
 CVE-2020-14476
 	RESERVED
 CVE-2020-14475 (A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff235b62f747b18aea90010e5cf6cb3836c69c8e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff235b62f747b18aea90010e5cf6cb3836c69c8e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200626/0a8a67a8/attachment.html>