[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2021-3816/cacti: stretch not-affected

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e30f850 by Sylvain Beucler at 2022-02-02T16:51:14+01:00
CVE-2021-3816/cacti: stretch not-affected

- - - - -
2357f5ee by Sylvain Beucler at 2022-02-02T16:52:37+01:00
CVE-2021-23225/cacti: stretch postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19722,6 +19722,7 @@ CVE-2021-26247 (As an unauthenticated remote user, visit "http://<CACTI_SERVE
 	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/2b8097c06030ab72c5b3bdadb23dceb5332f0e94 (1.2.0-beta1)
 CVE-2021-23225 (Cacti 1.1.38 allows authenticated users with User Management permissio ...)
 	- cacti 1.2.1+ds1-1
+	[stretch] - cacti <postponed> (Minor issue; stored XSS requires prior admin access)
 	NOTE: https://github.com/Cacti/cacti/issues/1882
 CVE-2022-0005
 	RESERVED
@@ -23790,6 +23791,7 @@ CVE-2021-41381 (Payara Micro Community 5.2021.6 and below allows Directory Trave
 	NOT-FOR-US: Payara Micro Community
 CVE-2021-3816 (Cacti 1.1.38 allows authenticated users with User Management permissio ...)
 	- cacti 1.2.1+ds1-1
+	[stretch] - cacti <not-affected> (user_group_admin.php not present, added in 1.0)
 	NOTE: https://github.com/Cacti/cacti/issues/1882
 	NOTE: Fixed by: https://github.com/Cacti/cacti/commit/2b8097c06030ab72c5b3bdadb23dceb5332f0e94 (1.2.0-beta1)
 CVE-2021-41380 (** DISPUTED ** RealVNC Viewer 6.21.406 allows remote VNC servers to ca ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6325b1f4513bb83f4c9a096bc5481a6cceeaf39f...2357f5ee0c75e4bf837db64a89eb78d1294fbc9b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6325b1f4513bb83f4c9a096bc5481a6cceeaf39f...2357f5ee0c75e4bf837db64a89eb78d1294fbc9b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220202/1f4f23d8/attachment.htm>