Action not permitted
Modal body text goes here.
CVE-2018-10933
Vulnerability from cvelistv5
Published
2018-10-17 12:00
Modified
2024-08-05 07:54
Severity ?
EPSS score ?
Summary
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T07:54:35.801Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "USN-3795-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/3795-1/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "name": "USN-3795-2", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/3795-2/" }, { "name": "DSA-4322", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "https://www.debian.org/security/2018/dsa-4322" }, { "name": "45638", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "url": "https://www.exploit-db.com/exploits/45638/" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "name": "105677", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/105677" }, { "name": "[debian-lts-announce] 20181018 [SECURITY] [DLA 1548-1] libssh security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20190118-0002/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "libssh", "vendor": "[UNKNOWN]", "versions": [ { "status": "affected", "version": "0.7.6" }, { "status": "affected", "version": "0.8.4" } ] } ], "datePublic": "2018-10-16T00:00:00", "descriptions": [ { "lang": "en", "value": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access." } ], "metrics": [ { "cvssV3_0": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-592", "description": "CWE-592", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2019-01-19T10:57:02", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "name": "USN-3795-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/3795-1/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "name": "USN-3795-2", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/3795-2/" }, { "name": "DSA-4322", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "https://www.debian.org/security/2018/dsa-4322" }, { "name": "45638", "tags": [ "exploit", "x_refsource_EXPLOIT-DB" ], "url": "https://www.exploit-db.com/exploits/45638/" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "name": "105677", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/105677" }, { "name": "[debian-lts-announce] 20181018 [SECURITY] [DLA 1548-1] libssh security update", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://security.netapp.com/advisory/ntap-20190118-0002/" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2018-10933", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "libssh", "version": { "version_data": [ { "version_value": "0.7.6" }, { "version_value": "0.8.4" } ] } } ] }, "vendor_name": "[UNKNOWN]" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access." } ] }, "impact": { "cvss": [ [ { "vectorString": "9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" } ] ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-592" } ] } ] }, "references": { "reference_data": [ { "name": "USN-3795-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3795-1/" }, { "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html", "refsource": "CONFIRM", "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "name": "USN-3795-2", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3795-2/" }, { "name": "DSA-4322", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2018/dsa-4322" }, { "name": "45638", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/45638/" }, { "name": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt", "refsource": "CONFIRM", "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "name": "105677", "refsource": "BID", "url": "http://www.securityfocus.com/bid/105677" }, { "name": "[debian-lts-announce] 20181018 [SECURITY] [DLA 1548-1] libssh security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016", "refsource": "CONFIRM", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "name": "https://security.netapp.com/advisory/ntap-20190118-0002/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190118-0002/" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2018-10933", "datePublished": "2018-10-17T12:00:00", "dateReserved": "2018-05-09T00:00:00", "dateUpdated": "2024-08-05T07:54:35.801Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2018-10933\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2018-10-17T12:29:00.650\",\"lastModified\":\"2019-10-09T23:33:16.243\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.\"},{\"lang\":\"es\",\"value\":\"Se ha detectado una vulnerabilidad en la m\u00e1quina de estado del lado del servidor de libssh en versiones anteriores a la 0.7.6 y 0.8.4. Un cliente malicioso podr\u00eda crear canales sin realizar antes la autenticaci\u00f3n, lo que resulta en un acceso no autorizado.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2},{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":6.4},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-287\"}]},{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-592\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"0.6.0\",\"versionEndExcluding\":\"0.7.6\",\"matchCriteriaId\":\"850C5633-D6DD-4C96-8010-67B53F70E43B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"0.8.0\",\"versionEndExcluding\":\"0.8.4\",\"matchCriteriaId\":\"24880ACB-F06F-4A56-AD91-CA37E2E78994\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"B5A6F2F3-4894-4392-8296-3B8DD2679084\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*\",\"matchCriteriaId\":\"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07C312A0-CD2C-4B9C-B064-6409B25C278F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*\",\"versionStartIncluding\":\"7.3\",\"matchCriteriaId\":\"6AADE2A6-B78C-4B9C-8FAB-58DB50F69D84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*\",\"versionStartIncluding\":\"9.4\",\"matchCriteriaId\":\"7E49ACFC-FD48-4ED7-86E8-68B5B753852C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5735E553-9731-4AAC-BCFF-989377F817B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B7A6697-98CC-4E36-93DB-B7160F8399F9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.13\",\"matchCriteriaId\":\"8EE7FAC3-D61F-42E8-8E3A-172CE9AD9A12\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/105677\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20190118-0002/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3795-1/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://usn.ubuntu.com/3795-2/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2018/dsa-4322\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/45638/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://www.libssh.org/security/advisories/CVE-2018-10933.txt\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}" } }
rhba-2018_3712
Vulnerability from csaf_redhat
Published
2018-11-28 08:02
Modified
2024-11-22 12:20
Summary
Red Hat Bug Fix Advisory: cockpit bug fix update
Notes
Topic
Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras.
Details
Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser.
This update fixes two bugs, including this:
* The cockpit dashboard has been changed to present SHA256 fingerprints instead of MD5 fingerprints when connecting to remote machines through SSH. MD5 fingerprints are cryptographically weak now, and do not work with FIPS mode enabled. (BZ#1585191)
Users of cockpit are advised to upgrade to these updated packages, which fix these two bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated cockpit packages that fix two bugs are now available for Red Hat Enterprise Linux 7 Extras.", "title": "Topic" }, { "category": "general", "text": "Cockpit is a server administration interface that makes it easy to administer GNU/Linux servers through a web browser.\n\nThis update fixes two bugs, including this:\n\n* The cockpit dashboard has been changed to present SHA256 fingerprints instead of MD5 fingerprints when connecting to remote machines through SSH. MD5 fingerprints are cryptographically weak now, and do not work with FIPS mode enabled. (BZ#1585191)\n\nUsers of cockpit are advised to upgrade to these updated packages, which fix these two bugs.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2018:3712", "url": "https://access.redhat.com/errata/RHBA-2018:3712" }, { "category": "external", "summary": "1585191", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1585191" }, { "category": "external", "summary": "1637182", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1637182" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhba-2018_3712.json" } ], "title": "Red Hat Bug Fix Advisory: cockpit bug fix update", "tracking": { "current_release_date": "2024-11-22T12:20:43+00:00", "generator": { "date": "2024-11-22T12:20:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHBA-2018:3712", "initial_release_date": "2018-11-28T08:02:36+00:00", "revision_history": [ { "date": "2018-11-28T08:02:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2018-11-28T08:02:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T12:20:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7 Extras", "product": { "name": "Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_other:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7 Extras", "product": { "name": "Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_other:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7 Extras", "product": { "name": "Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_extras_other:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux Extras" }, { "branches": [ { "category": "product_version", "name": "libssh-0:0.7.1-7.el7.aarch64", "product": { "name": "libssh-0:0.7.1-7.el7.aarch64", "product_id": "libssh-0:0.7.1-7.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh@0.7.1-7.el7?arch=aarch64" } } }, { "category": "product_version", "name": "libssh-devel-0:0.7.1-7.el7.aarch64", "product": { "name": "libssh-devel-0:0.7.1-7.el7.aarch64", "product_id": "libssh-devel-0:0.7.1-7.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-devel@0.7.1-7.el7?arch=aarch64" } } }, { "category": "product_version", "name": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "product": { "name": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "product_id": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-debuginfo@0.7.1-7.el7?arch=aarch64" } } }, { "category": "product_version", "name": "cockpit-pcp-0:176-4.el7.aarch64", "product": { "name": "cockpit-pcp-0:176-4.el7.aarch64", "product_id": "cockpit-pcp-0:176-4.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-pcp@176-4.el7?arch=aarch64" } } }, { "category": "product_version", "name": "cockpit-dashboard-0:176-4.el7.aarch64", "product": { "name": "cockpit-dashboard-0:176-4.el7.aarch64", "product_id": "cockpit-dashboard-0:176-4.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-dashboard@176-4.el7?arch=aarch64" } } }, { "category": "product_version", "name": "cockpit-machines-0:176-4.el7.aarch64", "product": { "name": "cockpit-machines-0:176-4.el7.aarch64", "product_id": "cockpit-machines-0:176-4.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-machines@176-4.el7?arch=aarch64" } } }, { "category": "product_version", "name": "cockpit-packagekit-0:176-4.el7.aarch64", "product": { "name": "cockpit-packagekit-0:176-4.el7.aarch64", "product_id": "cockpit-packagekit-0:176-4.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-packagekit@176-4.el7?arch=aarch64" } } }, { "category": "product_version", "name": "cockpit-docker-0:176-4.el7.aarch64", "product": { "name": "cockpit-docker-0:176-4.el7.aarch64", "product_id": "cockpit-docker-0:176-4.el7.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-docker@176-4.el7?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libssh-0:0.7.1-7.el7.x86_64", "product": { "name": "libssh-0:0.7.1-7.el7.x86_64", "product_id": "libssh-0:0.7.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh@0.7.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "libssh-devel-0:0.7.1-7.el7.x86_64", "product": { "name": "libssh-devel-0:0.7.1-7.el7.x86_64", "product_id": "libssh-devel-0:0.7.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-devel@0.7.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "product": { "name": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "product_id": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-debuginfo@0.7.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cockpit-pcp-0:176-4.el7.x86_64", "product": { "name": "cockpit-pcp-0:176-4.el7.x86_64", "product_id": "cockpit-pcp-0:176-4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-pcp@176-4.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cockpit-dashboard-0:176-4.el7.x86_64", "product": { "name": "cockpit-dashboard-0:176-4.el7.x86_64", "product_id": "cockpit-dashboard-0:176-4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-dashboard@176-4.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cockpit-machines-0:176-4.el7.x86_64", "product": { "name": "cockpit-machines-0:176-4.el7.x86_64", "product_id": "cockpit-machines-0:176-4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-machines@176-4.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cockpit-packagekit-0:176-4.el7.x86_64", "product": { "name": "cockpit-packagekit-0:176-4.el7.x86_64", "product_id": "cockpit-packagekit-0:176-4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-packagekit@176-4.el7?arch=x86_64" } } }, { "category": "product_version", "name": "cockpit-docker-0:176-4.el7.x86_64", "product": { "name": "cockpit-docker-0:176-4.el7.x86_64", "product_id": "cockpit-docker-0:176-4.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-docker@176-4.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libssh-0:0.7.1-7.el7.s390x", "product": { "name": "libssh-0:0.7.1-7.el7.s390x", "product_id": "libssh-0:0.7.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh@0.7.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "libssh-devel-0:0.7.1-7.el7.s390x", "product": { "name": "libssh-devel-0:0.7.1-7.el7.s390x", "product_id": "libssh-devel-0:0.7.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-devel@0.7.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "product": { "name": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "product_id": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-debuginfo@0.7.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "cockpit-pcp-0:176-4.el7.s390x", "product": { "name": "cockpit-pcp-0:176-4.el7.s390x", "product_id": "cockpit-pcp-0:176-4.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-pcp@176-4.el7?arch=s390x" } } }, { "category": "product_version", "name": "cockpit-dashboard-0:176-4.el7.s390x", "product": { "name": "cockpit-dashboard-0:176-4.el7.s390x", "product_id": "cockpit-dashboard-0:176-4.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-dashboard@176-4.el7?arch=s390x" } } }, { "category": "product_version", "name": "cockpit-machines-0:176-4.el7.s390x", "product": { "name": "cockpit-machines-0:176-4.el7.s390x", "product_id": "cockpit-machines-0:176-4.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-machines@176-4.el7?arch=s390x" } } }, { "category": "product_version", "name": "cockpit-packagekit-0:176-4.el7.s390x", "product": { "name": "cockpit-packagekit-0:176-4.el7.s390x", "product_id": "cockpit-packagekit-0:176-4.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-packagekit@176-4.el7?arch=s390x" } } }, { "category": "product_version", "name": "cockpit-docker-0:176-4.el7.s390x", "product": { "name": "cockpit-docker-0:176-4.el7.s390x", "product_id": "cockpit-docker-0:176-4.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-docker@176-4.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libssh-0:0.7.1-7.el7.src", "product": { "name": "libssh-0:0.7.1-7.el7.src", "product_id": "libssh-0:0.7.1-7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh@0.7.1-7.el7?arch=src" } } }, { "category": "product_version", "name": "cockpit-0:176-4.el7.src", "product": { "name": "cockpit-0:176-4.el7.src", "product_id": "cockpit-0:176-4.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit@176-4.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "libssh-0:0.7.1-7.el7.ppc64le", "product": { "name": "libssh-0:0.7.1-7.el7.ppc64le", "product_id": "libssh-0:0.7.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh@0.7.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "libssh-devel-0:0.7.1-7.el7.ppc64le", "product": { "name": "libssh-devel-0:0.7.1-7.el7.ppc64le", "product_id": "libssh-devel-0:0.7.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-devel@0.7.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "product": { "name": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "product_id": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/libssh-debuginfo@0.7.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cockpit-pcp-0:176-4.el7.ppc64le", "product": { "name": "cockpit-pcp-0:176-4.el7.ppc64le", "product_id": "cockpit-pcp-0:176-4.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-pcp@176-4.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cockpit-dashboard-0:176-4.el7.ppc64le", "product": { "name": "cockpit-dashboard-0:176-4.el7.ppc64le", "product_id": "cockpit-dashboard-0:176-4.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-dashboard@176-4.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cockpit-machines-0:176-4.el7.ppc64le", "product": { "name": "cockpit-machines-0:176-4.el7.ppc64le", "product_id": "cockpit-machines-0:176-4.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-machines@176-4.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cockpit-packagekit-0:176-4.el7.ppc64le", "product": { "name": "cockpit-packagekit-0:176-4.el7.ppc64le", "product_id": "cockpit-packagekit-0:176-4.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-packagekit@176-4.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "cockpit-docker-0:176-4.el7.ppc64le", "product": { "name": "cockpit-docker-0:176-4.el7.ppc64le", "product_id": "cockpit-docker-0:176-4.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-docker@176-4.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "cockpit-storaged-0:176-4.el7.noarch", "product": { "name": "cockpit-storaged-0:176-4.el7.noarch", "product_id": "cockpit-storaged-0:176-4.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-storaged@176-4.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cockpit-0:176-4.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-0:176-4.el7.src" }, "product_reference": "cockpit-0:176-4.el7.src", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-dashboard-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x" }, "product_reference": "cockpit-dashboard-0:176-4.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64" }, "product_reference": "cockpit-docker-0:176-4.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-docker-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x" }, "product_reference": "cockpit-docker-0:176-4.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64" }, "product_reference": "cockpit-docker-0:176-4.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64" }, "product_reference": "cockpit-machines-0:176-4.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-machines-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x" }, "product_reference": "cockpit-machines-0:176-4.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64" }, "product_reference": "cockpit-machines-0:176-4.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-packagekit-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x" }, "product_reference": "cockpit-packagekit-0:176-4.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64" }, "product_reference": "cockpit-pcp-0:176-4.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-pcp-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x" }, "product_reference": "cockpit-pcp-0:176-4.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64" }, "product_reference": "cockpit-pcp-0:176-4.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-storaged-0:176-4.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch" }, "product_reference": "cockpit-storaged-0:176-4.el7.noarch", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src" }, "product_reference": "libssh-0:0.7.1-7.el7.src", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Client-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-0:176-4.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-0:176-4.el7.src" }, "product_reference": "cockpit-0:176-4.el7.src", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-dashboard-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x" }, "product_reference": "cockpit-dashboard-0:176-4.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64" }, "product_reference": "cockpit-docker-0:176-4.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-docker-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x" }, "product_reference": "cockpit-docker-0:176-4.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64" }, "product_reference": "cockpit-docker-0:176-4.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64" }, "product_reference": "cockpit-machines-0:176-4.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-machines-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x" }, "product_reference": "cockpit-machines-0:176-4.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64" }, "product_reference": "cockpit-machines-0:176-4.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-packagekit-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x" }, "product_reference": "cockpit-packagekit-0:176-4.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64" }, "product_reference": "cockpit-pcp-0:176-4.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-pcp-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x" }, "product_reference": "cockpit-pcp-0:176-4.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64" }, "product_reference": "cockpit-pcp-0:176-4.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-storaged-0:176-4.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch" }, "product_reference": "cockpit-storaged-0:176-4.el7.noarch", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src" }, "product_reference": "libssh-0:0.7.1-7.el7.src", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Server-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-0:176-4.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-0:176-4.el7.src" }, "product_reference": "cockpit-0:176-4.el7.src", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-dashboard-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x" }, "product_reference": "cockpit-dashboard-0:176-4.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-dashboard-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64" }, "product_reference": "cockpit-dashboard-0:176-4.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64" }, "product_reference": "cockpit-docker-0:176-4.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-docker-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x" }, "product_reference": "cockpit-docker-0:176-4.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-docker-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64" }, "product_reference": "cockpit-docker-0:176-4.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64" }, "product_reference": "cockpit-machines-0:176-4.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-machines-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x" }, "product_reference": "cockpit-machines-0:176-4.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-machines-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64" }, "product_reference": "cockpit-machines-0:176-4.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-packagekit-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x" }, "product_reference": "cockpit-packagekit-0:176-4.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-packagekit-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64" }, "product_reference": "cockpit-packagekit-0:176-4.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64" }, "product_reference": "cockpit-pcp-0:176-4.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le" }, "product_reference": "cockpit-pcp-0:176-4.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x" }, "product_reference": "cockpit-pcp-0:176-4.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-pcp-0:176-4.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64" }, "product_reference": "cockpit-pcp-0:176-4.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-storaged-0:176-4.el7.noarch as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch" }, "product_reference": "cockpit-storaged-0:176-4.el7.noarch", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.src as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src" }, "product_reference": "libssh-0:0.7.1-7.el7.src", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-debuginfo-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-debuginfo-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.aarch64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.aarch64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.ppc64le as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.s390x as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" }, { "category": "default_component_of", "full_product_name": { "name": "libssh-devel-0:0.7.1-7.el7.x86_64 as a component of Red Hat Enterprise Linux 7 Extras", "product_id": "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" }, "product_reference": "libssh-devel-0:0.7.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-EXTRAS-7.6" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the libssh team" ] }, { "names": [ "Peter Winter-Smith" ], "organization": "NCC Group", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2018-10933", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2018-08-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1614973" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in libssh\u0027s server-side state machine. A malicious client could create channels without first performing authentication, resulting in unauthorized access.", "title": "Vulnerability description" }, { "category": "summary", "text": "libssh: Authentication Bypass due to improper message callbacks implementation", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability affects libssh shipped in Red Hat Enterprise Linux 7 Extras. No libssh packages are included in Red Hat Enterprise Linux 6 and earlier. This issue does not affect libssh2 or openssh.\n\nThis issue can only be affect applications that use libssh to implement an SSH server; SSH client functionality is not affected. No packages in Red Hat products use libssh to implement an SSH server. Therefore, no package from Red Hat that uses the libssh library is affected by this flaw.\n\nThe libssh library is available for customer or third party code to use. Such code that is linked against libssh and uses the `ssh_bind*` functions may be affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-10933" }, { "category": "external", "summary": "RHBZ#1614973", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1614973" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-10933", "url": "https://www.cve.org/CVERecord?id=CVE-2018-10933" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-10933", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10933" }, { "category": "external", "summary": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt", "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" } ], "release_date": "2018-10-16T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2018-11-28T08:02:36+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2018:3712" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Client-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Client-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Client-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Client-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Client-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Server-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Server-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Server-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Server-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-0:176-4.el7.src", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-dashboard-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-docker-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-machines-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-packagekit-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.aarch64", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.ppc64le", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.s390x", "7Workstation-EXTRAS-7.6:cockpit-pcp-0:176-4.el7.x86_64", "7Workstation-EXTRAS-7.6:cockpit-storaged-0:176-4.el7.noarch", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.src", "7Workstation-EXTRAS-7.6:libssh-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-debuginfo-0:0.7.1-7.el7.x86_64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.aarch64", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.ppc64le", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.s390x", "7Workstation-EXTRAS-7.6:libssh-devel-0:0.7.1-7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "libssh: Authentication Bypass due to improper message callbacks implementation" } ] }
icsa-20-294-02
Vulnerability from csaf_cisa
Published
2020-10-20 00:00
Modified
2020-10-20 00:00
Summary
Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of this vulnerability could allow an attacker to remotely take control of the product.
Critical infrastructure sectors
Energy Sector
Countries/areas deployed
Worldwide
Company headquarters location
Switzerland
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.
Exploitability
No known public exploits specifically target this vulnerability.
{ "document": { "acknowledgments": [ { "organization": "Hitachi ABB Power Grids", "summary": "reporting this vulnerability to CISA" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow an attacker to remotely take control of the product.", "title": "Risk evaluation" }, { "category": "other", "text": "Energy Sector", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Switzerland", "title": "Company headquarters location" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target this vulnerability.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-20-294-02 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-294-02.json" }, { "category": "self", "summary": "ICS Advisory ICSA-20-294-02 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-20-294-02" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer", "tracking": { "current_release_date": "2020-10-20T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-20-294-02", "initial_release_date": "2020-10-20T00:00:00.000000Z", "revision_history": [ { "date": "2020-10-20T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-20-294-02 Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c co5ne_r2d14_03.esw", "product": { "name": "XMC20 R6 using COGE5: versions older than co5ne_r2d14_03.esw", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "XMC20 R6 using COGE5" }, { "branches": [ { "category": "product_version_range", "name": "\u003cco5ne_r1h07_12.esw", "product": { "name": "XMC20 R4 using COGE5: versions older than co5ne_r1h07_12.esw", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "XMC20 R4 using COGE5" } ], "category": "vendor", "name": "Hitachi Energy" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-10933", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "A vulnerability exists in a specific library included in these products. An attacker could exploit the vulnerability by sending a specially crafted message to the XMC20 node to open a communication channel without first performing authentication, resulting in unauthorized access.CVE-2018-10933 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10933" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Hitachi ABB Power Grids has corrected the problem in the following product versions and recommends users apply the firmware update at the earliest availability", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "XMC20 R4: COGE5 Version co5ne_r1h07_12.esw (and newer)", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "XMC20 R6: COGE5 Version co5ne_r2d14_03.esw (and newer)", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "For additional information and support please contact a product provider or a Hitachi ABB Power Grids service organization.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.hitachiabb-powergrids.com/contact-us/" }, { "category": "mitigation", "details": "Hitachi ABB Power Grids published cybersecurity advisory PGVU-PGGA-XMC20-2020034 to give users more information about this issue.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A2862\u0026LanguageCode=en\u0026DocumentPartId=\u0026Action=Launch" }, { "category": "mitigation", "details": "Physically protect process control systems from direct access by unauthorized personnel.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Do not directly connect control systems to the Internet.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Separate control systems from other networks by means of a firewall system that has a minimal number of ports exposed.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Do not use control systems networks for Internet browsing, instant messaging, or receiving e-mails.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
icsa-21-007-01
Vulnerability from csaf_cisa
Published
2021-01-07 00:00
Modified
2021-01-07 00:00
Summary
Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of this vulnerability could allow an attacker remote access to the device without authentication.
Critical infrastructure sectors
Energy
Countries/areas deployed
Worldwide
Company headquarters location
Switzerland
Recommended Practices
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.
Exploitability
No known public exploits specifically target this vulnerability.
{ "document": { "acknowledgments": [ { "organization": "Hitachi ABB Power Grids", "summary": "reporting this vulnerability to CISA" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "general", "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov", "title": "CISA Disclaimer" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "summary", "text": "Successful exploitation of this vulnerability could allow an attacker remote access to the device without authentication.", "title": "Risk evaluation" }, { "category": "other", "text": "Energy", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Switzerland", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" }, { "category": "other", "text": "No known public exploits specifically target this vulnerability.", "title": "Exploitability" } ], "publisher": { "category": "coordinator", "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "ICS Advisory ICSA-21-007-01 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-007-01.json" }, { "category": "self", "summary": "ICS Advisory ICSA-21-007-01 Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-007-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-007-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer", "tracking": { "current_release_date": "2021-01-07T00:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-21-007-01", "initial_release_date": "2021-01-07T00:00:00.000000Z", "revision_history": [ { "date": "2021-01-07T00:00:00.000000Z", "legacy_version": "Initial", "number": "1", "summary": "ICSA-21-007-01 Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c cesne_r2d14_03.esw", "product": { "name": "FOX61x R2 using CESM1/CESM2: All versions prior to cesne_r2d14_03.esw", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "FOX61x R2 using CESM1/CESM2" }, { "branches": [ { "category": "product_version_range", "name": "\u003c cesne_r1h07_12.esw", "product": { "name": "FOX61x R1 using CESM1/CESM2: All versions prior to cesne_r1h07_12.esw", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "FOX61x R1 using CESM1/CESM2" } ], "category": "vendor", "name": "Hitachi Energy" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-10933", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "notes": [ { "category": "summary", "text": "An attacker can send a specially crafted message to the device causing it to open a communication channel without first performing authentication, which may allow an attacker to execute arbitrary commands.CVE-2018-10933 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002" ] }, "references": [ { "category": "external", "summary": "web.nvd.nist.gov", "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-10933" }, { "category": "external", "summary": "www.first.org", "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "remediations": [ { "category": "mitigation", "details": "Hitachi ABB Power Grids recommends users apply the following firmware: FOX61x R1: CESM1/CESM2: Update to Version cesne_r1h07_12.esw or newer", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "Hitachi ABB Power Grids recommends users apply the following firmware: FOX61x R2: CESM1/CESM2: Update to Version cesne_r2d14_03.esw or newer", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] }, { "category": "mitigation", "details": "For additional information and support please contact a product provider or Hitachi ABB Power Grids service organization.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ], "url": "https://www.hitachiabb-powergrids.com/contact-us/" }, { "category": "mitigation", "details": "Hitachi ABB Power Grids recommends security practices and firewall configurations to help protect a process control network from attacks originating from outside the network. Such practices require process control systems be physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by a firewall system that has a minimal number of ports exposed. Other systems must be evaluated on case-by-case basis. Process control systems should not be used for Internet browsing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "CSAFPID-0001", "CSAFPID-0002" ] } ] } ] }
cisco-sa-20181019-libssh
Vulnerability from csaf_cisco
Published
2018-10-19 16:00
Modified
2018-11-05 20:29
Summary
libssh Authentication Bypass Vulnerability Affecting Cisco Products: October 2018
Notes
Summary
A vulnerability in libssh could allow an unauthenticated, remote attacker to bypass authentication on a targeted system.
The vulnerability is due to improper authentication operations by the server-side state machine of the affected software. An attacker could exploit this vulnerability by presenting a SSH2_MSG_USERAUTH_SUCCESS message to a targeted system. A successful exploit could allow the attacker to bypass authentication and gain unauthorized access to a targeted system.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh"]
Affected Products
Cisco investigated its product line to determine which products and services may be affected by this vulnerability.
The Vulnerable Products ["#vulnerable"] section will include Cisco bug IDs for each affected product or service. The bugs are accessible through the Cisco Bug Search Tool ["https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID"] and contain additional platform-specific information, including workarounds (if available) and fixed software releases.
Any product not listed in the Vulnerable Products ["#vulnerable"] section of this advisory is to be considered not vulnerable.
Vulnerable Products
Cisco has investigated its product line and has determined that no products or services are known to be affected by this vulnerability.
Products Confirmed Not Vulnerable
Only products and services listed in the Vulnerable Products ["#vulnerable"] section of this advisory are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect the following products and services. All members of the product families in the following list are not considered to be affected by this vulnerability unless they are explicitly listed in the preceding Vulnerable Products ["#vulnerable"] section:
Cable Modems
Cisco Stealthwatch Online Visibility Assessment
Collaboration and Social Media
Cisco Webex Meetings Server
Endpoint Clients and Client Software
Cisco Jabber Guest
Network Application, Service, and Acceleration
Cisco Adaptive Security Appliance (ASA) Software
Cisco Cloud Services Platform 2100
Network and Content Security Devices
Cisco ASA Next-Generation Firewall Services
Cisco Content Security Management Appliance (SMA)
Cisco Email Security Appliance (ESA)
Cisco FireSIGHT System
Cisco Identity Services Engine (ISE)
Cisco Web Security Appliance (WSA)
Network Management and Provisioning
Cisco Elastic Services Controller (ESC)
Cisco Enterprise Service Automation
Cisco FindIT Network Manager
Cisco NetFlow Generation Appliance
Cisco Network Analysis Module
Cisco Policy Suite
Cisco Prime Access Registrar
Cisco Prime Collaboration Provisioning
Cisco Prime Infrastructure
Cisco Prime Network Registrar Virtual Appliance
Cisco Prime Network Registrar
Cisco Prime Performance Manager
Cisco WAN Automation Engine (WAE)
Routing and Switching - Enterprise and Service Provider
Cisco Application Policy Infrastructure Controller (APIC)
Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers
Cisco IOS XR Software
Cisco Nexus 9000 Series Switches - Standalone, NX-OS mode
Cisco Nexus 9000 Series Switches
Unified Computing
Cisco UCS Director
Voice and Unified Communications Devices
Cisco IP Interoperability and Collaboration System (IPICS)
Cisco Management Heartbeat Server
Cisco Unified Communications Manager Session Management Edition
Cisco Unified Communications Manager
Cisco Unified Contact Center Express
Video, Streaming, TelePresence, and Transcoding Devices
Cisco Cloud Object Storage
Cisco DCM Series D990x Digital Content Manager
Cisco VDS Recorder
Cisco VDS-TV Caching Nodes
Cisco VDS-TV Streamer
Cisco VDS-TV Vault
Cisco Video Distribution Suite for Internet Streaming (VDS-IS/CDS-IS)
Cisco Video Surveillance 4300E and 4500E High-Definition IP Cameras
Cisco Video Surveillance Media Server
Wireless
Cisco Wireless LAN Controller
Cisco Cloud Hosted Services
Cisco Cloud Email Security
Cisco Cloudlock
Cisco Energy Management
Cisco Smart Software Manager Satellite
Cisco Stealthwatch Learning Networks License
Cisco Umbrella
Cisco Virtual HetNet
Workarounds
Any workarounds will be documented in the product-specific Cisco bugs, which are identified in the Vulnerable Products ["#vulnerable"] section of this advisory.
Fixed Software
For information about fixed software releases, consult the Cisco bugs identified in the Vulnerable Products ["#vulnerable"] section of this advisory.
When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts ["https://www.cisco.com/go/psirt"] page, to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco TAC or their contracted maintenance providers.
Vulnerability Policy
To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source
On October 16, 2018, libssh.org publicly disclosed this vulnerability in a security bulletin at the following link: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ ["https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/"]
Legal Disclaimer
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
{ "document": { "acknowledgments": [ { "summary": "On October 16, 2018, libssh.org publicly disclosed this vulnerability in a security bulletin at the following link: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ [\"https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/\"]" } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "notes": [ { "category": "summary", "text": "A vulnerability in libssh could allow an unauthenticated, remote attacker to bypass authentication on a targeted system.\r\n\r\nThe vulnerability is due to improper authentication operations by the server-side state machine of the affected software. An attacker could exploit this vulnerability by presenting a SSH2_MSG_USERAUTH_SUCCESS message to a targeted system. A successful exploit could allow the attacker to bypass authentication and gain unauthorized access to a targeted system.\r\n\r\n\r\n\r\n This advisory is available at the following link:\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh\"]", "title": "Summary" }, { "category": "general", "text": "Cisco investigated its product line to determine which products and services may be affected by this vulnerability.\r\n\r\nThe Vulnerable Products [\"#vulnerable\"] section will include Cisco bug IDs for each affected product or service. The bugs are accessible through the Cisco Bug Search Tool [\"https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID\"] and contain additional platform-specific information, including workarounds (if available) and fixed software releases.\r\n\r\nAny product not listed in the Vulnerable Products [\"#vulnerable\"] section of this advisory is to be considered not vulnerable.", "title": "Affected Products" }, { "category": "general", "text": "Cisco has investigated its product line and has determined that no products or services are known to be affected by this vulnerability.", "title": "Vulnerable Products" }, { "category": "general", "text": "Only products and services listed in the Vulnerable Products [\"#vulnerable\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following products and services. All members of the product families in the following list are not considered to be affected by this vulnerability unless they are explicitly listed in the preceding Vulnerable Products [\"#vulnerable\"] section:\r\n Cable Modems\r\n\r\nCisco Stealthwatch Online Visibility Assessment\r\nCollaboration and Social Media\r\n\r\nCisco Webex Meetings Server\r\nEndpoint Clients and Client Software\r\n\r\nCisco Jabber Guest\r\nNetwork Application, Service, and Acceleration\r\n\r\nCisco Adaptive Security Appliance (ASA) Software\r\nCisco Cloud Services Platform 2100\r\nNetwork and Content Security Devices\r\n\r\nCisco ASA Next-Generation Firewall Services\r\nCisco Content Security Management Appliance (SMA)\r\nCisco Email Security Appliance (ESA)\r\nCisco FireSIGHT System\r\nCisco Identity Services Engine (ISE)\r\nCisco Web Security Appliance (WSA)\r\nNetwork Management and Provisioning\r\n\r\nCisco Elastic Services Controller (ESC)\r\nCisco Enterprise Service Automation\r\nCisco FindIT Network Manager\r\nCisco NetFlow Generation Appliance\r\nCisco Network Analysis Module\r\nCisco Policy Suite\r\nCisco Prime Access Registrar\r\nCisco Prime Collaboration Provisioning\r\nCisco Prime Infrastructure\r\nCisco Prime Network Registrar Virtual Appliance\r\nCisco Prime Network Registrar\r\nCisco Prime Performance Manager\r\nCisco WAN Automation Engine (WAE)\r\nRouting and Switching - Enterprise and Service Provider\r\n\r\nCisco Application Policy Infrastructure Controller (APIC)\r\nCisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers\r\nCisco IOS XR Software\r\nCisco Nexus 9000 Series Switches - Standalone, NX-OS mode\r\nCisco Nexus 9000 Series Switches\r\nUnified Computing\r\n\r\nCisco UCS Director\r\nVoice and Unified Communications Devices\r\n\r\nCisco IP Interoperability and Collaboration System (IPICS)\r\nCisco Management Heartbeat Server\r\nCisco Unified Communications Manager Session Management Edition\r\nCisco Unified Communications Manager\r\nCisco Unified Contact Center Express\r\nVideo, Streaming, TelePresence, and Transcoding Devices\r\n\r\nCisco Cloud Object Storage\r\nCisco DCM Series D990x Digital Content Manager\r\nCisco VDS Recorder\r\nCisco VDS-TV Caching Nodes\r\nCisco VDS-TV Streamer\r\nCisco VDS-TV Vault\r\nCisco Video Distribution Suite for Internet Streaming (VDS-IS/CDS-IS)\r\nCisco Video Surveillance 4300E and 4500E High-Definition IP Cameras\r\nCisco Video Surveillance Media Server\r\nWireless\r\n\r\nCisco Wireless LAN Controller\r\nCisco Cloud Hosted Services\r\n\r\nCisco Cloud Email Security\r\nCisco Cloudlock\r\nCisco Energy Management\r\nCisco Smart Software Manager Satellite\r\nCisco Stealthwatch Learning Networks License\r\nCisco Umbrella\r\nCisco Virtual HetNet", "title": "Products Confirmed Not Vulnerable" }, { "category": "general", "text": "Any workarounds will be documented in the product-specific Cisco bugs, which are identified in the Vulnerable Products [\"#vulnerable\"] section of this advisory.", "title": "Workarounds" }, { "category": "general", "text": "For information about fixed software releases, consult the Cisco bugs identified in the Vulnerable Products [\"#vulnerable\"] section of this advisory.\r\n\r\nWhen considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts [\"https://www.cisco.com/go/psirt\"] page, to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco TAC or their contracted maintenance providers.", "title": "Fixed Software" }, { "category": "general", "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.", "title": "Vulnerability Policy" }, { "category": "general", "text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.", "title": "Exploitation and Public Announcements" }, { "category": "general", "text": "On October 16, 2018, libssh.org publicly disclosed this vulnerability in a security bulletin at the following link: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ [\"https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/\"]", "title": "Source" }, { "category": "legal_disclaimer", "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.", "title": "Legal Disclaimer" } ], "publisher": { "category": "vendor", "contact_details": "Emergency Support:\r\n+1 877 228 7302 (toll-free within North America)\r\n+1 408 525 6532 (International direct-dial)\r\nNon-emergency Support:\r\nEmail: psirt@cisco.com\r\nSupport requests that are received via e-mail are typically acknowledged within 48 hours.", "issuing_authority": "Cisco product security incident response is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks. The on-call Cisco PSIRT works 24x7 with Cisco customers, independent security researchers, consultants, industry organizations, and other vendors to identify possible security issues with Cisco products and networks.\r\nMore information can be found in Cisco Security Vulnerability Policy available at https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html", "name": "Cisco", "namespace": "https://wwww.cisco.com" }, "references": [ { "category": "self", "summary": "libssh Authentication Bypass Vulnerability Affecting Cisco Products: October 2018", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh" }, { "category": "external", "summary": "Cisco Security Vulnerability Policy", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html" }, { "category": "external", "summary": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh" }, { "category": "external", "summary": "Cisco Bug Search Tool", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID" }, { "category": "external", "summary": "Cisco Security Advisories and Alerts", "url": "https://www.cisco.com/go/psirt" }, { "category": "external", "summary": "Security Vulnerability Policy", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html" }, { "category": "external", "summary": "https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/", "url": "https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/" } ], "title": "libssh Authentication Bypass Vulnerability Affecting Cisco Products: October 2018", "tracking": { "current_release_date": "2018-11-05T20:29:00+00:00", "generator": { "date": "2022-09-03T03:03:29+00:00", "engine": { "name": "TVCE" } }, "id": "cisco-sa-20181019-libssh", "initial_release_date": "2018-10-19T16:00:00+00:00", "revision_history": [ { "date": "2018-10-19T16:37:53+00:00", "number": "1.0.0", "summary": "Initial public release." }, { "date": "2018-10-22T17:23:12+00:00", "number": "1.1.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-23T16:26:56+00:00", "number": "1.2.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-24T16:29:06+00:00", "number": "1.3.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-25T16:11:42+00:00", "number": "1.4.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-26T15:51:56+00:00", "number": "1.5.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-30T18:42:22+00:00", "number": "1.6.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-10-31T19:12:31+00:00", "number": "1.7.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." }, { "date": "2018-11-05T20:29:52+00:00", "number": "1.8.0", "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable." } ], "status": "final", "version": "1.8.0" } }, "vulnerabilities": [ { "cve": "CVE-2018-10933", "notes": [ { "category": "general", "text": "No additional information for this vulneraiblity is currently avaialbe.", "title": "No Notes" } ], "release_date": "2018-10-17T14:47:00+00:00", "remediations": [ { "category": "none_available", "details": "No remediation is available at this time." } ], "title": "libssh Server-Side State Machine Unauthorized Access Vulnerability" } ] }
ghsa-22gf-f5w4-hrfq
Vulnerability from github
Published
2022-05-13 01:34
Modified
2022-05-13 01:34
Severity ?
Details
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
{ "affected": [], "aliases": [ "CVE-2018-10933" ], "database_specific": { "cwe_ids": [ "CWE-287" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-10-17T12:29:00Z", "severity": "CRITICAL" }, "details": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.", "id": "GHSA-22gf-f5w4-hrfq", "modified": "2022-05-13T01:34:53Z", "published": "2022-05-13T01:34:53Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-10933" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "type": "WEB", "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "type": "WEB", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20190118-0002" }, { "type": "WEB", "url": "https://usn.ubuntu.com/3795-1" }, { "type": "WEB", "url": "https://usn.ubuntu.com/3795-2" }, { "type": "WEB", "url": "https://www.debian.org/security/2018/dsa-4322" }, { "type": "WEB", "url": "https://www.exploit-db.com/exploits/45638" }, { "type": "WEB", "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "type": "WEB", "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/105677" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "type": "CVSS_V3" } ] }
wid-sec-w-2024-1051
Vulnerability from csaf_certbund
Published
2018-10-16 22:00
Modified
2024-05-07 22:00
Summary
libssh: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
libssh ist eine C Bibliothek für das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuführen, Dateien zu übertragen oder als sicherer und transparenter Tunnel für entfernte Programme genutzt werden.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libssh ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Linux
- UNIX
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "libssh ist eine C Bibliothek f\u00fcr das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuf\u00fchren, Dateien zu \u00fcbertragen oder als sicherer und transparenter Tunnel f\u00fcr entfernte Programme genutzt werden.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libssh ausnutzen, um Sicherheitsvorkehrungen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- UNIX", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-1051 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2024-1051.json" }, { "category": "self", "summary": "WID-SEC-2024-1051 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1051" }, { "category": "external", "summary": "libssh Release Notes vom 2018-10-16", "url": "https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/" }, { "category": "external", "summary": "Debian Security Advisory DSA-4322-1 vom 2018-10-17", "url": "https://lists.debian.org/debian-security-announce/2018/msg00253.html" }, { "category": "external", "summary": "Debian Security Advisory DSA-4322 vom 2018-10-18", "url": "https://www.debian.org/security/2018/dsa-4322" }, { "category": "external", "summary": "Ubuntu Security Notice USN-3795-1 vom 2018-10-18", "url": "http://www.ubuntu.com/usn/usn-3795-1" }, { "category": "external", "summary": "Dell Security Advisory DSA-2024-198 vom 2024-05-08", "url": "https://www.dell.com/support/kbdoc/000224827/dsa-2024-=" } ], "source_lang": "en-US", "title": "libssh: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen", "tracking": { "current_release_date": "2024-05-07T22:00:00.000+00:00", "generator": { "date": "2024-05-08T08:11:12.758+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-1051", "initial_release_date": "2018-10-16T22:00:00.000+00:00", "revision_history": [ { "date": "2018-10-16T22:00:00.000+00:00", "number": "1", "summary": "Initial Release" }, { "date": "2018-10-17T22:00:00.000+00:00", "number": "2", "summary": "Added references" }, { "date": "2018-10-17T22:00:00.000+00:00", "number": "3", "summary": "New remediations available" }, { "date": "2018-10-18T22:00:00.000+00:00", "number": "4", "summary": "New remediations available" }, { "date": "2018-10-21T22:00:00.000+00:00", "number": "5", "summary": "New remediations available" }, { "date": "2018-10-23T22:00:00.000+00:00", "number": "6", "summary": "Anpassung" }, { "date": "2024-05-07T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Dell aufgenommen" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "virtual", "product": { "name": "Dell NetWorker virtual", "product_id": "T034583", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:virtual" } } } ], "category": "product_name", "name": "NetWorker" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "EMC Avamar", "product": { "name": "EMC Avamar", "product_id": "T014381", "product_identification_helper": { "cpe": "cpe:/a:emc:avamar:-" } } } ], "category": "vendor", "name": "EMC" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c0.8.4", "product": { "name": "Open Source libssh \u003c0.8.4", "product_id": "T012886", "product_identification_helper": { "cpe": "cpe:/a:libssh:libssh:0.8.4" } } }, { "category": "product_version_range", "name": "\u003c0.7.6", "product": { "name": "Open Source libssh \u003c0.7.6", "product_id": "T012887", "product_identification_helper": { "cpe": "cpe:/a:libssh:libssh:0.7.6" } } } ], "category": "product_name", "name": "libssh" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-10933", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in libssh. Ein entfernter anonymer Angreifer kann durch das Senden speziell bearbeiteter Nachrichten die Authentisierung umgehen und sich so ohne Zugangsdaten erfolgreich authentifizieren." } ], "product_status": { "known_affected": [ "T014381", "2951", "T000126", "T034583" ] }, "release_date": "2018-10-16T22:00:00Z", "title": "CVE-2018-10933" } ] }
gsd-2018-10933
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2018-10933", "description": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.", "id": "GSD-2018-10933", "references": [ "https://www.suse.com/security/cve/CVE-2018-10933.html", "https://www.debian.org/security/2018/dsa-4322", "https://access.redhat.com/errata/RHBA-2018:3712", "https://ubuntu.com/security/CVE-2018-10933", "https://advisories.mageia.org/CVE-2018-10933.html", "https://security.archlinux.org/CVE-2018-10933", "https://packetstormsecurity.com/files/cve/CVE-2018-10933" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2018-10933" ], "details": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.", "id": "GSD-2018-10933", "modified": "2023-12-13T01:22:41.192134Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2018-10933", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "libssh", "version": { "version_data": [ { "version_value": "0.7.6" }, { "version_value": "0.8.4" } ] } } ] }, "vendor_name": "[UNKNOWN]" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access." } ] }, "impact": { "cvss": [ [ { "vectorString": "9.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" } ] ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-592" } ] } ] }, "references": { "reference_data": [ { "name": "USN-3795-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3795-1/" }, { "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html", "refsource": "CONFIRM", "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "name": "USN-3795-2", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/3795-2/" }, { "name": "DSA-4322", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2018/dsa-4322" }, { "name": "45638", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/45638/" }, { "name": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt", "refsource": "CONFIRM", "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "name": "105677", "refsource": "BID", "url": "http://www.securityfocus.com/bid/105677" }, { "name": "[debian-lts-announce] 20181018 [SECURITY] [DLA 1548-1] libssh security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016", "refsource": "CONFIRM", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "name": "https://security.netapp.com/advisory/ntap-20190118-0002/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20190118-0002/" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "0.8.4", "versionStartIncluding": "0.8.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndExcluding": "0.7.6", "versionStartIncluding": "0.6.0", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:vsphere:*:*", "cpe_name": [], "versionStartIncluding": "9.4", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:*:*:*:*:*:windows:*:*", "cpe_name": [], "versionStartIncluding": "7.3", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "8.0.13", "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2018-10933" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "A vulnerability was found in libssh\u0027s server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-287" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "https://www.libssh.org/security/advisories/CVE-2018-10933.txt" }, { "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933", "refsource": "CONFIRM", "tags": [ "Issue Tracking", "Third Party Advisory" ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933" }, { "name": "DSA-4322", "refsource": "DEBIAN", "tags": [ "Third Party Advisory" ], "url": "https://www.debian.org/security/2018/dsa-4322" }, { "name": "USN-3795-1", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/3795-1/" }, { "name": "[debian-lts-announce] 20181018 [SECURITY] [DLA 1548-1] libssh security update", "refsource": "MLIST", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.debian.org/debian-lts-announce/2018/10/msg00010.html" }, { "name": "45638", "refsource": "EXPLOIT-DB", "tags": [ "Exploit", "Third Party Advisory", "VDB Entry" ], "url": "https://www.exploit-db.com/exploits/45638/" }, { "name": "105677", "refsource": "BID", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "http://www.securityfocus.com/bid/105677" }, { "name": "USN-3795-2", "refsource": "UBUNTU", "tags": [ "Third Party Advisory" ], "url": "https://usn.ubuntu.com/3795-2/" }, { "name": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016" }, { "name": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html", "refsource": "CONFIRM", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" }, { "name": "https://security.netapp.com/advisory/ntap-20190118-0002/", "refsource": "CONFIRM", "tags": [ "Third Party Advisory" ], "url": "https://security.netapp.com/advisory/ntap-20190118-0002/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 5.2 } }, "lastModifiedDate": "2019-10-09T23:33Z", "publishedDate": "2018-10-17T12:29Z" } } }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.