Vulnerabilites related to apereo - java_cas_client
Vulnerability from fkie_nvd
Published
2020-01-24 19:15
Modified
2024-11-21 02:09
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.
References
cve@mitre.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.htmlThird Party Advisory
cve@mitre.orghttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718Third Party Advisory
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=1131350Issue Tracking, Third Party Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/95673Third Party Advisory, VDB Entry
cve@mitre.orghttps://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8dPatch, Third Party Advisory
cve@mitre.orghttps://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814Patch, Third Party Advisory
cve@mitre.orghttps://github.com/Jasig/phpCAS/blob/master/docs/ChangeLogRelease Notes, Third Party Advisory
cve@mitre.orghttps://github.com/Jasig/phpCAS/pull/125Third Party Advisory
cve@mitre.orghttps://issues.jasig.org/browse/CASC-228Third Party Advisory
cve@mitre.orghttps://www.debian.org/security/2014/dsa-3017.en.htmlThird Party Advisory
cve@mitre.orghttps://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html
af854a3a-2127-422b-91ae-364da2661108http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.htmlThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1131350Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/95673Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8dPatch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLogRelease Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://github.com/Jasig/phpCAS/pull/125Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://issues.jasig.org/browse/CASC-228Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2014/dsa-3017.en.htmlThird Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html
Impacted products
Vendor Product Version
apereo .net_cas_client *
apereo java_cas_client *
apereo phpcas *
debian debian_linux 7.0
fedoraproject fedora 20


To clipboard 

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:apereo:.net_cas_client:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "D0D3881B-F7F5-4E0F-B76F-EFA42ECB0E75",
                     versionEndExcluding: "1.0.2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apereo:java_cas_client:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "3A6BA56C-70FF-46A7-8648-E412BEA54EB9",
                     versionEndExcluding: "3.3.2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "949AB748-0980-4F16-8031-42A413597117",
                     versionEndExcluding: "1.3.3",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "16F59A04-14CF-49E2-9973-645477EA09DA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*",
                     matchCriteriaId: "FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.",
      },
      {
         lang: "es",
         value: "Se detectó una vulnerabilidad de inyección de parámetros de URL en el paso de validación de tickets del canal posterior del protocolo CAS en Jasig Java CAS Client versiones anteriores a 3.3.2, .NET CAS Client versiones anteriores a 1.0.2 y phpCAS versiones anteriores a 1.3.3, que permiten a atacantes remotos inyectar script web o HTML arbitrario por medio del (1) parámetro service en el archivo validation/AbstractUrlBasedTicketValidator.java o del (2) parámetro pgtUrl en el archivo validation/Cas20ServiceTicketValidator.java.",
      },
   ],
   id: "CVE-2014-4172",
   lastModified: "2024-11-21T02:09:38.420",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 9.8,
               baseSeverity: "CRITICAL",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 3.9,
            impactScore: 5.9,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2020-01-24T19:15:12.010",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Issue Tracking",
            "Third Party Advisory",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Release Notes",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/phpCAS/pull/125",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://issues.jasig.org/browse/CASC-228",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.debian.org/security/2014/dsa-3017.en.html",
      },
      {
         source: "cve@mitre.org",
         url: "https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Issue Tracking",
            "Third Party Advisory",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Release Notes",
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://github.com/Jasig/phpCAS/pull/125",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://issues.jasig.org/browse/CASC-228",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://www.debian.org/security/2014/dsa-3017.en.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-74",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

cve-2014-4172
Vulnerability from cvelistv5
Published
2020-01-24 18:29
Modified
2024-08-06 11:04
Severity ?
Summary
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.
References
https://bugzilla.redhat.com/show_bug.cgi?id=1131350x_refsource_MISC
https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.htmlx_refsource_MISC
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718x_refsource_MISC
https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8dx_refsource_MISC
https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814x_refsource_MISC
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLogx_refsource_MISC
https://github.com/Jasig/phpCAS/pull/125x_refsource_MISC
https://issues.jasig.org/browse/CASC-228x_refsource_MISC
https://www.debian.org/security/2014/dsa-3017.en.htmlx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.htmlx_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/95673x_refsource_MISC
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T11:04:28.882Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/Jasig/phpCAS/pull/125",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://issues.jasig.org/browse/CASC-228",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2014/dsa-3017.en.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2014-06-24T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-01-24T18:29:32",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Jasig/phpCAS/pull/125",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://issues.jasig.org/browse/CASC-228",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.debian.org/security/2014/dsa-3017.en.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2014-4172",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1131350",
                  },
                  {
                     name: "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html",
                     refsource: "MISC",
                     url: "https://www.mail-archive.com/cas-user@lists.jasig.org/msg17338.html",
                  },
                  {
                     name: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
                     refsource: "MISC",
                     url: "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718",
                  },
                  {
                     name: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
                     refsource: "MISC",
                     url: "https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d",
                  },
                  {
                     name: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
                     refsource: "MISC",
                     url: "https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814",
                  },
                  {
                     name: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
                     refsource: "MISC",
                     url: "https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog",
                  },
                  {
                     name: "https://github.com/Jasig/phpCAS/pull/125",
                     refsource: "MISC",
                     url: "https://github.com/Jasig/phpCAS/pull/125",
                  },
                  {
                     name: "https://issues.jasig.org/browse/CASC-228",
                     refsource: "MISC",
                     url: "https://issues.jasig.org/browse/CASC-228",
                  },
                  {
                     name: "https://www.debian.org/security/2014/dsa-3017.en.html",
                     refsource: "MISC",
                     url: "https://www.debian.org/security/2014/dsa-3017.en.html",
                  },
                  {
                     name: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
                     refsource: "MISC",
                     url: "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html",
                  },
                  {
                     name: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
                     refsource: "MISC",
                     url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95673",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2014-4172",
      datePublished: "2020-01-24T18:29:32",
      dateReserved: "2014-06-17T00:00:00",
      dateUpdated: "2024-08-06T11:04:28.882Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}