Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.REDHAT-RHSA-2021-0079.NASL
HistoryJan 20, 2021 - 12:00 a.m.

RHEL 7 : OpenShift Container Platform 3.11.374 bug fix and (RHSA-2021:0079)

2021-01-2000:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

7.3 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0079 advisory.

  • golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter (CVE-2019-11840)

  • python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137)

  • kubernetes: MITM using LoadBalancer or ExternalIPs (CVE-2020-8554)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.

##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Red Hat Security Advisory RHSA-2021:0079. The text
# itself is copyright (C) Red Hat, Inc.
##

include('compat.inc');

if (description)
{
  script_id(145229);
  script_version("1.13");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/01/26");

  script_cve_id("CVE-2019-11840", "CVE-2020-8554", "CVE-2020-26137");
  script_xref(name:"RHSA", value:"2021:0079");

  script_name(english:"RHEL 7 : OpenShift Container Platform 3.11.374 bug fix and (RHSA-2021:0079)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Red Hat host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as
referenced in the RHSA-2021:0079 advisory.

  - golang.org/x/crypto: Keystream loop in amd64 assembly when overflowing 32-bit counter (CVE-2019-11840)

  - python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137)

  - kubernetes: MITM using LoadBalancer or ExternalIPs (CVE-2020-8554)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2019-11840");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2020-8554");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/security/cve/CVE-2020-26137");
  script_set_attribute(attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2021:0079");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1691529");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1883632");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.redhat.com/1891051");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-26137");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(113, 200, 330);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/05/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/01/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2021/01/20");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-enterprise-service-catalog");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-enterprise-service-catalog-svcat");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-clients");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-clients-redistributable");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-cluster-autoscaler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-descheduler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-docker-excluder");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-dockerregistry");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-excluder");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-hyperkube");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-hypershift");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-master");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-metrics-server");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-node");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-node-problem-detector");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-pod");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-sdn-ovs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-service-idler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-template-service-broker");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:atomic-openshift-web-console");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:golang-github-openshift-oauth-proxy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-enterprise-autoheal");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:openshift-enterprise-cluster-capacity");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:prometheus");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:prometheus-alertmanager");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:prometheus-node-exporter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:python2-urllib3");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Red Hat Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl", "redhat_repos.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm.inc');
include('rhel.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/RedHat/release');
if (isnull(os_release) || 'Red Hat' >!< os_release) audit(AUDIT_OS_NOT, 'Red Hat');
var os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:os_release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, 'Red Hat');
os_ver = os_ver[1];
if (!rhel_check_release(operator: 'ge', os_version: os_ver, rhel_version: '7')) audit(AUDIT_OS_NOT, 'Red Hat 7.x', 'Red Hat ' + os_ver);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Red Hat', cpu);

var constraints = [
  {
    'repo_relative_urls': [
      'content/dist/rhel/server/7/7Server/x86_64/ose/3.11/debug',
      'content/dist/rhel/server/7/7Server/x86_64/ose/3.11/os',
      'content/dist/rhel/server/7/7Server/x86_64/ose/3.11/source/SRPMS'
    ],
    'pkgs': [
      {'reference':'atomic-enterprise-service-catalog-3.11.374-1.git.1675.738abcc.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1', 'exists_check':'openshift-ansible'},
      {'reference':'atomic-enterprise-service-catalog-svcat-3.11.374-1.git.1675.738abcc.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1', 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-clients-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-clients-redistributable-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-cluster-autoscaler-3.11.374-1.git.0.2996f62.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-descheduler-3.11.374-1.git.299.f128e96.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-docker-excluder-3.11.374-1.git.0.ebd3ee9.el7', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-dockerregistry-3.11.374-1.git.481.e6a880c.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-excluder-3.11.374-1.git.0.ebd3ee9.el7', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-hyperkube-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-hypershift-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-master-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-metrics-server-3.11.374-1.git.53.9df25a9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-node-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-node-problem-detector-3.11.374-1.git.263.28335fb.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-pod-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-sdn-ovs-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-service-idler-3.11.374-1.git.15.523a1f7.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-template-service-broker-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-tests-3.11.374-1.git.0.ebd3ee9.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'atomic-openshift-web-console-3.11.374-1.git.647.9e78d83.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'golang-github-openshift-oauth-proxy-3.11.374-1.git.439.966c536.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'openshift-enterprise-autoheal-3.11.374-1.git.218.9cf7939.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'openshift-enterprise-cluster-capacity-3.11.374-1.git.379.80bd08f.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'prometheus-3.11.374-1.git.5026.29379c4.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'prometheus-alertmanager-3.11.374-1.git.0.3abd2a5.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'prometheus-node-exporter-3.11.374-1.git.1062.490d6d5.el7', 'cpu':'x86_64', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'},
      {'reference':'python2-urllib3-1.24.3-1.el7.noarch', 'release':'7', 'rpm_spec_vers_cmp':TRUE, 'exists_check':'openshift-ansible'}
    ]
  }
];

var applicable_repo_urls = rhel_determine_applicable_repository_urls(constraints:constraints);
if(applicable_repo_urls == RHEL_REPOS_NO_OVERLAP_MESSAGE) exit(0, RHEL_REPO_NOT_ENABLED);

var flag = 0;
foreach var constraint_array ( constraints ) {
  var repo_relative_urls = NULL;
  if (!empty_or_null(constraint_array['repo_relative_urls'])) repo_relative_urls = constraint_array['repo_relative_urls'];
  foreach var pkg ( constraint_array['pkgs'] ) {
    var reference = NULL;
    var _release = NULL;
    var sp = NULL;
    var _cpu = NULL;
    var el_string = NULL;
    var rpm_spec_vers_cmp = NULL;
    var epoch = NULL;
    var allowmaj = NULL;
    var exists_check = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['release'])) _release = 'RHEL' + pkg['release'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (reference &&
        _release &&
        rhel_decide_repo_relative_url_check(required_repo_url_list:repo_relative_urls) &&
        (applicable_repo_urls || (!exists_check || rpm_exists(release:_release, rpm:exists_check))) &&
        rpm_check(release:_release, sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj)) flag++;
  }
}

if (flag)
{
  var extra = NULL;
  if (empty_or_null(applicable_repo_urls)) extra = rpm_report_get() + redhat_report_repo_caveat();
  else extra = rpm_report_get() + redhat_report_package_caveat();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : extra
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'atomic-enterprise-service-catalog / etc');
}
VendorProductVersionCPE
redhatenterprise_linuxatomic-openshift-hypershiftp-cpe:/a:redhat:enterprise_linux:atomic-openshift-hypershift
redhatenterprise_linuxpython2-urllib3p-cpe:/a:redhat:enterprise_linux:python2-urllib3
redhatenterprise_linuxopenshift-enterprise-autohealp-cpe:/a:redhat:enterprise_linux:openshift-enterprise-autoheal
redhatenterprise_linuxatomic-openshift-sdn-ovsp-cpe:/a:redhat:enterprise_linux:atomic-openshift-sdn-ovs
redhatenterprise_linuxatomic-openshift-web-consolep-cpe:/a:redhat:enterprise_linux:atomic-openshift-web-console
redhatenterprise_linuxatomic-enterprise-service-catalog-svcatp-cpe:/a:redhat:enterprise_linux:atomic-enterprise-service-catalog-svcat
redhatenterprise_linuxatomic-openshift-cluster-autoscalerp-cpe:/a:redhat:enterprise_linux:atomic-openshift-cluster-autoscaler
redhatenterprise_linuxatomic-openshift-excluderp-cpe:/a:redhat:enterprise_linux:atomic-openshift-excluder
redhatenterprise_linuxatomic-openshift-template-service-brokerp-cpe:/a:redhat:enterprise_linux:atomic-openshift-template-service-broker
redhatenterprise_linuxprometheusp-cpe:/a:redhat:enterprise_linux:prometheus
Rows per page:
1-10 of 301

Related

redhat 8
osv 20
cve 3
cgr 1
cvelist 3
debian 8
redhatcve 3
openvas 20
nessus 50
debiancve 3
gitlab 5
veracode 3
github 3
ubuntucve 3
wolfi 1
nvd 3
prion 3
amazon 1
ibm 18
suse 4
rocky 2
cbl_mariner 4
mageia 2
ubuntu 1
oraclelinux 5
almalinux 2
githubexploit 5
alpinelinux 2
hackerone 1
f5 1
photon 7
centos 1
kitploit 2
rosalinux 1
redhat
redhat
(RHSA-2021:0079) Moderate: OpenShift Container Platform 3.11.374 bug fix and security update
2021-01-20 16:38:11
(RHSA-2021:1631) Moderate: python-urllib3 security update
2021-05-18 05:42:27
(RHSA-2022:5235) Moderate: python security update
2022-06-28 07:52:39
osv
osv
Insufficiently random values in golang.org/x/crypto/salsa20
2022-07-01 20:15:25
golang-go.crypto - security update
2019-06-30 00:00:00
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
2022-05-24 16:45:25
cve
cve
CVE-2019-11840
2019-05-09 16:29:00
CVE-2020-8554
2021-01-21 17:15:13
CVE-2020-26137
2020-09-30 18:15:26
cgr
cgr
CVE-2019-11840 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2019-11840
2019-05-09 00:00:00
CVE-2020-8554 Kubernetes man in the middle using LoadBalancer or ExternalIPs
2020-12-07 00:00:00
CVE-2020-26137
2020-09-29 00:00:00
debian
debian
[SECURITY] [DLA 2442-1] obfs4proxy security update
2020-11-09 21:54:58
[SECURITY] [DLA 2454-1] rclone security update
2020-11-18 21:01:58
[SECURITY] [DLA 2527-1] snapd security update
2021-01-17 21:20:08
redhatcve
redhatcve
CVE-2019-11840
2020-04-08 05:31:02
CVE-2020-26137
2020-09-29 19:03:30
CVE-2020-8554
2020-12-07 20:21:43
openvas
openvas
Debian: Security Advisory (DLA-2442-1)
2020-11-10 00:00:00
Debian: Security Advisory (DLA-1840-1)
2019-07-01 00:00:00
Debian: Security Advisory (DLA-2527-1)
2021-01-18 00:00:00
nessus
nessus
Debian DLA-2454-1 : rclone security update
2020-11-19 00:00:00
Debian DLA-2442-1 : obfs4proxy security update
2020-11-10 00:00:00
Debian DLA-1840-1 : golang-go.crypto security update
2019-07-01 00:00:00
debiancve
debiancve
CVE-2019-11840
2019-05-09 16:29:00
CVE-2020-8554
2021-01-21 17:15:13
CVE-2020-26137
2020-09-30 18:15:26
gitlab
gitlab
Use of Insufficiently Random Values
2022-05-24 00:00:00
Use of Insufficiently Random Values
2022-05-24 00:00:00
Incorrect Authorization
2021-01-21 00:00:00
veracode
veracode
Wrong And Predictable Encryption
2019-07-01 07:31:03
Carriage-Return Line-Feed (CRLF) Injection
2020-10-01 01:43:17
Man-in-the-Middle (MitM)
2021-01-22 08:18:49
github
github
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
2022-05-24 16:45:25
Unverified Ownership in Kubernetes
2022-02-08 21:50:34
CRLF injection in urllib3
2021-06-18 18:46:43
ubuntucve
ubuntucve
CVE-2019-11840
2019-05-09 00:00:00
CVE-2020-8554
2021-01-21 00:00:00
CVE-2020-26137
2020-09-30 00:00:00
wolfi
wolfi
CVE-2019-11840 vulnerabilities
2024-07-03 09:08:38
nvd
nvd
CVE-2019-11840
2019-05-09 16:29:00
CVE-2020-8554
2021-01-21 17:15:13
CVE-2020-26137
2020-09-30 18:15:26
prion
prion
Information disclosure
2019-05-09 16:29:00
Code injection
2021-01-21 17:15:00
Crlf injection
2020-09-30 18:15:00
amazon
amazon
Medium: python-urllib3
2021-06-16 20:37:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to CRLF injection in Python urllib3 [CVE-2020-26137]
2024-02-29 20:30:41
Security Bulletin: A vulnerability in urlib3 affects IBM Robotic Process Automation for Cloud Pak which may result in CRLF injection (CVE-2020-26137).
2023-08-21 17:54:57
Security Bulletin: Vulnerability in Urllib3 affects IBM Spectrum Protect Container and Microsoft File Systems Agents (CVE-2020-26137)
2020-12-04 06:34:59
suse
suse
Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 (moderate)
2021-08-23 00:00:00
Security update for python-urllib3 (moderate)
2020-12-18 00:00:00
Security update for python-urllib3 (moderate)
2020-12-13 00:00:00
rocky
rocky
python-urllib3 security update
2021-05-18 05:42:27
python27:2.7 security and bug fix update
2021-05-18 06:02:07
cbl_mariner
cbl_mariner
CVE-2020-26137 affecting package python-urllib3 1.24.2-2
2021-08-11 06:39:25
CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-1
2023-11-08 02:07:28
CVE-2020-8554 affecting package kubernetes 1.22.6-4
2022-01-26 22:57:10
mageia
mageia
Updated python-urllib3 packages fix security vulnerability
2021-01-25 18:25:52
Updated python-pip packages fix security vulnerabilities
2021-01-25 18:25:52
ubuntu
ubuntu
urllib3 vulnerability
2020-10-05 00:00:00
oraclelinux
oraclelinux
python-urllib3 security update
2021-05-25 00:00:00
olcne security update
2021-02-10 00:00:00
olcne security update
2021-02-10 00:00:00
almalinux
almalinux
Moderate: python-urllib3 security update
2021-05-18 05:42:27
Moderate: python27:2.7 security and bug fix update
2021-05-18 06:02:07
githubexploit
githubexploit
Exploit for Incorrect Authorization in Kubernetes
2020-12-01 16:58:39
Exploit for Incorrect Authorization in Kubernetes
2021-01-21 22:41:50
Exploit for Incorrect Authorization in Kubernetes
2021-02-09 21:29:44
alpinelinux
alpinelinux
CVE-2020-8554
2021-01-21 17:15:13
CVE-2020-26137
2020-09-30 18:15:26
hackerone
hackerone
Kubernetes: Man in the middle using LoadBalancer or ExternalIPs services
2019-12-27 06:05:35
f5
f5
K000133547 : Python urllib3 vulnerability CVE-2020-26137
2023-04-18 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2022-0456
2022-03-28 00:00:00
Critical Photon OS Security Update - PHSA-2021-0442
2021-10-13 00:00:00
Important Photon OS Security Update - PHSA-2021-0246
2021-06-02 00:00:00
centos
centos
python, tkinter security update
2022-08-02 19:15:12
kitploit
kitploit
CDK - Zero Dependency Container Penetration Toolkit
2021-01-21 11:30:00
Metarget - Framework Providing Automatic Constructions Of Vulnerable Infrastructures
2021-06-04 21:30:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2203
2023-08-01 12:58:39

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

7.3 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON
Related for REDHAT-RHSA-2021-0079.NASL
redhat8osv20cve3cgr1cvelist3debian8redhatcve3openvas20nessus50debiancve3gitlab5veracode3github3ubuntucve3wolfi1nvd3prion3amazon1ibm18suse4rocky2cbl_mariner4mageia2ubuntu1oraclelinux5almalinux2githubexploit5alpinelinux2hackerone1f51photon7centos1kitploit2rosalinux1