Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-3833

openwsman: Infinite loop in process_connection() allows denial of service

Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.

CVSS 3.1 · 7.5 High EPSS 15.2% KEV · Not listed
Vendors
Fedoraproject Opensuse Openwsman Project and 1 more
Products
Fedora Leap Openwsman and 1 more
CVE-2019-3816

openwsman: Disclosure of arbitrary files outside of the registered URIs

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server.

CVSS 3.1 · 7.5 High EPSS 14.7% KEV · Not listed
Vendors
Fedoraproject Opensuse Openwsman Project and 1 more
Products
Fedora Leap Openwsman and 8 more