{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for go1.15",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n  \ngo1.15 (released 2020-08-11) Go 1.15 is a major release of Go.\n\ngo1.15.x minor releases will be provided through August 2021.\n\n  https://github.com/golang/go/wiki/Go-Release-Cycle\n\nMost changes are in the implementation of the toolchain, runtime,\nand libraries. As always, the release maintains the Go 1 promise\nof compatibility. We expect almost all Go programs to continue to\ncompile and run as before.\n\n* See release notes https://golang.org/doc/go1.15. Excerpts\n  relevant to OBS environment and for SUSE/openSUSE follow:\n* Module support in the go command is ready for production use,\n  and we encourage all users to migrate to Go modules for\n  dependency management.\n* Module cache: The location of the module cache may now be set\n  with the GOMODCACHE environment variable. The default value of\n  GOMODCACHE is GOPATH[0]/pkg/mod, the location of the module\n  cache before this change.\n* Compiler flag parsing: Various flag parsing issues in go test\n  and go vet have been fixed. Notably, flags specified in\n  GOFLAGS are handled more consistently, and the -outputdir flag\n  now interprets relative paths relative to the working\n  directory of the go command (rather than the working directory\n  of each individual test).\n* The GOPROXY environment variable now supports skipping proxies\n  that return errors. Proxy URLs may now be separated with\n  either commas (,) or pipe characters (|). If a proxy URL is\n  followed by a comma, the go command will only try the next\n  proxy in the list after a 404 or 410 HTTP response. If a proxy\n  URL is followed by a pipe character, the go command will try\n  the next proxy in the list after any error. Note that the\n  default value of GOPROXY remains\n  https://proxy.golang.org,direct, which does not fall back to\n  direct in case of errors.\n* On a Unix system, if the kill command or kill system call is\n  used to send a SIGSEGV, SIGBUS, or SIGFPE signal to a Go\n  program, and if the signal is not being handled via\n  os/signal.Notify, the Go program will now reliably crash with\n  a stack trace. In earlier releases the behavior was\n  unpredictable.\n* Allocation of small objects now performs much better at high\n  core counts, and has lower worst-case latency.\n* Go 1.15 reduces typical binary sizes by around 5% compared to\n  Go 1.14 by eliminating certain types of GC metadata and more\n  aggressively eliminating unused type metadata.\n* The toolchain now mitigates Intel CPU erratum SKX102 on\n  GOARCH=amd64 by aligning functions to 32 byte boundaries and\n  padding jump instructions. While this padding increases binary\n  sizes, this is more than made up for by the binary size\n  improvements mentioned above.\n* Go 1.15 adds a -spectre flag to both the compiler and the\n  assembler, to allow enabling Spectre mitigations. These should\n  almost never be needed and are provided mainly as a \u0027defense\n  in depth\u0027 mechanism. See the Spectre Go wiki page for details.\n* The compiler now rejects //go: compiler directives that have\n  no meaning for the declaration they are applied to with a\n  \u0027misplaced compiler directive\u0027 error. Such misapplied\n  directives were broken before, but were silently ignored by\n  the compiler.\n* Substantial improvements to the Go linker, which reduce linker\n  resource usage (both time and memory) and improve code\n  robustness/maintainability. Linking is 20% faster and requires\n  30% less memory on average. These changes are part of a\n  multi-release project to modernize the Go linker, meaning that\n  there will be additional linker improvements expected in\n  future releases.\n* The linker now defaults to internal linking mode for\n  -buildmode=pie on linux/amd64 and linux/arm64, so these\n  configurations no longer require a C linker.\n* There has been progress in improving the stability and\n  performance of the 64-bit RISC-V port on Linux (GOOS=linux,\n  GOARCH=riscv64). It also now supports asynchronous preemption.\n* crypto/x509: The deprecated, legacy behavior of treating the\n  CommonName field on X.509 certificates as a host name when no\n  Subject Alternative Names are present is now disabled by\n  default. It can be temporarily re-enabled by adding the value\n  x509ignoreCN=0 to the GODEBUG environment variable. Note that\n  if the CommonName is an invalid host name, it\u0027s always\n  ignored, regardless of GODEBUG settings. Invalid names include\n  those with any characters other than letters, digits, hyphens\n  and underscores, and those with empty labels or trailing dots.\n* crypto/x509: go1.15 applications with an AWS DB instance that\n  was created or updated to the rds-ca-2019 certificate prior to\n  July 28, 2020, you must update the certificate again. If you\n  created your DB instance or updated its certificate after July\n  28, 2020, no action is required. For more information, see\n  go#39568\n\n\nThis update ships go1.15.2 (released 2020-09-09) includes fixes to the compiler,\nruntime, documentation, the go command, and the net/mail, os, sync, and testing packages.\n\n* go#41193 net/http/fcgi: race detected during execution of TestResponseWriterSniffsContentType test\n* go#41178 doc: include fix for #34437 in Go 1.14 release notes\n* go#41034 testing: Cleanup races with Logf and Errorf\n* go#41011 sync: sync.Map keys will never be garbage collected\n* go#40934 runtime: checkptr incorrectly -race flagging when using \u0026^ arithmetic\n* go#40900 internal/poll: CopyFileRange returns EPERM on CircleCI Docker Host running 4.10.0-40-generic\n* go#40868 cmd/compile: R12 can be clobbered for write barrier call on PPC64\n* go#40849 testing: \u0027=== PAUSE\u0027 lines do not change the test name for the next log line\n* go#40845 runtime: Panic if newstack at runtime.acquireLockRank\n* go#40805 cmd/test2json: tests that panic are marked as passing\n* go#40804 net/mail: change in behavior of ParseAddressList(\u0027\u0027) in 1.15\n* go#40802 cmd/go: in 1.15: change in \u0027go test\u0027 argument parsing\n* go#40798 cmd/compile: inline marker targets not reachable after assembly on arm\n* go#40772 cmd/compile: compiler crashes in ssa: isNonNegative bad type\n* go#40767 cmd/compile: inline marker targets not reachable after assembly on ppc64x\n* go#40739 internal/poll: CopyFileRange returns ENOTSUP on Linux 3.10.0 kernel on NFS mount\n* go#40412 runtime: Windows service lifecycle events behave incorrectly when called within a golang environment\n\ngo1.15.1 (released 2020-09-01) includes security fixes to the net/http/cgi and net/http/fcgi packages.\n\n* bsc#1176031 CVE-2020-24553: go net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified\n* go#41165 net/http/cgi,net/http/fcgi: Cross-Site Scripting (XSS) when Content-Type is not specified\n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2020-2776,SUSE-SLE-Module-Development-Tools-15-SP1-2020-2776,SUSE-SLE-Module-Development-Tools-15-SP2-2020-2776",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2776-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2020:2776-1",
        "url": "https://www.suse.com/support/update/announcement/2020/suse-su-20202776-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2020:2776-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007495.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170826",
        "url": "https://bugzilla.suse.com/1170826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1175132",
        "url": "https://bugzilla.suse.com/1175132"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176031",
        "url": "https://bugzilla.suse.com/1176031"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-24553 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-24553/"
      }
    ],
    "title": "Security update for go1.15",
    "tracking": {
      "current_release_date": "2020-09-29T08:14:41Z",
      "generator": {
        "date": "2020-09-29T08:14:41Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2020:2776-1",
      "initial_release_date": "2020-09-29T08:14:41Z",
      "revision_history": [
        {
          "date": "2020-09-29T08:14:41Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.15-1.15.2-1.3.1.aarch64",
                "product": {
                  "name": "go1.15-1.15.2-1.3.1.aarch64",
                  "product_id": "go1.15-1.15.2-1.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-doc-1.15.2-1.3.1.aarch64",
                "product": {
                  "name": "go1.15-doc-1.15.2-1.3.1.aarch64",
                  "product_id": "go1.15-doc-1.15.2-1.3.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-race-1.15.2-1.3.1.aarch64",
                "product": {
                  "name": "go1.15-race-1.15.2-1.3.1.aarch64",
                  "product_id": "go1.15-race-1.15.2-1.3.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.15-1.15.2-1.3.1.i586",
                "product": {
                  "name": "go1.15-1.15.2-1.3.1.i586",
                  "product_id": "go1.15-1.15.2-1.3.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-doc-1.15.2-1.3.1.i586",
                "product": {
                  "name": "go1.15-doc-1.15.2-1.3.1.i586",
                  "product_id": "go1.15-doc-1.15.2-1.3.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.15-1.15.2-1.3.1.ppc64le",
                "product": {
                  "name": "go1.15-1.15.2-1.3.1.ppc64le",
                  "product_id": "go1.15-1.15.2-1.3.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-doc-1.15.2-1.3.1.ppc64le",
                "product": {
                  "name": "go1.15-doc-1.15.2-1.3.1.ppc64le",
                  "product_id": "go1.15-doc-1.15.2-1.3.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.15-1.15.2-1.3.1.s390x",
                "product": {
                  "name": "go1.15-1.15.2-1.3.1.s390x",
                  "product_id": "go1.15-1.15.2-1.3.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-doc-1.15.2-1.3.1.s390x",
                "product": {
                  "name": "go1.15-doc-1.15.2-1.3.1.s390x",
                  "product_id": "go1.15-doc-1.15.2-1.3.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "go1.15-1.15.2-1.3.1.x86_64",
                "product": {
                  "name": "go1.15-1.15.2-1.3.1.x86_64",
                  "product_id": "go1.15-1.15.2-1.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-doc-1.15.2-1.3.1.x86_64",
                "product": {
                  "name": "go1.15-doc-1.15.2-1.3.1.x86_64",
                  "product_id": "go1.15-doc-1.15.2-1.3.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "go1.15-race-1.15.2-1.3.1.x86_64",
                "product": {
                  "name": "go1.15-race-1.15.2-1.3.1.x86_64",
                  "product_id": "go1.15-race-1.15.2-1.3.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
                  "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-development-tools:15:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Development Tools 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Development Tools 15 SP2",
                  "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-development-tools:15:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.aarch64"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.ppc64le"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.s390x"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.x86_64"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.aarch64"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.ppc64le"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.s390x"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP1",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.x86_64"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.aarch64"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.ppc64le"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.s390x"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-1.15.2-1.3.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.x86_64"
        },
        "product_reference": "go1.15-1.15.2-1.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.aarch64"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.ppc64le"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.s390x"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "go1.15-doc-1.15.2-1.3.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.x86_64"
        },
        "product_reference": "go1.15-doc-1.15.2-1.3.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-24553",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-24553"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.x86_64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.aarch64",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.ppc64le",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.s390x",
          "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-24553",
          "url": "https://www.suse.com/security/cve/CVE-2020-24553"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1176031 for CVE-2020-24553",
          "url": "https://bugzilla.suse.com/1176031"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP1:go1.15-doc-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-1.15.2-1.3.1.x86_64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.aarch64",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.ppc64le",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.s390x",
            "SUSE Linux Enterprise Module for Development Tools 15 SP2:go1.15-doc-1.15.2-1.3.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2020-09-29T08:14:41Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-24553"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM Security Guardium ist eine L\u00f6sung f\u00fcr die \u00dcberwachung und Auditierung des Datenzugriffs.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Guardium ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-1599 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2023-1599.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-1599 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1599"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7008449 vom 2023-06-29",
        "url": "https://www.ibm.com/support/pages/node/7008449"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin: 6403463 vom 2021-01-13",
        "url": "https://www.ibm.com/support/pages/node/6403463"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:0521 vom 2021-02-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:0521"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:0548 vom 2021-02-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:0548"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-4758-1 vom 2021-03-09",
        "url": "https://ubuntu.com/security/notices/USN-4758-1"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM Security Guardium: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-06-29T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:53:55.140+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2023-1599",
      "initial_release_date": "2021-01-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-01-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-02-15T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-02-16T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-03-08T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2023-06-29T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM DB2",
            "product": {
              "name": "IBM DB2",
              "product_id": "5104",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:db2:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Guardium Insights 2.0.2",
            "product": {
              "name": "IBM Security Guardium Insights 2.0.2",
              "product_id": "316562",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_guardium:10.0"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-14039",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-14039"
    },
    {
      "cve": "CVE-2020-14145",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-14145"
    },
    {
      "cve": "CVE-2020-15168",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-15168"
    },
    {
      "cve": "CVE-2020-15586",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-15586"
    },
    {
      "cve": "CVE-2020-15778",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-15778"
    },
    {
      "cve": "CVE-2020-16845",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-16845"
    },
    {
      "cve": "CVE-2020-24553",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-24553"
    },
    {
      "cve": "CVE-2020-4166",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4166"
    },
    {
      "cve": "CVE-2020-4594",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4594"
    },
    {
      "cve": "CVE-2020-4595",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4595"
    },
    {
      "cve": "CVE-2020-4596",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4596"
    },
    {
      "cve": "CVE-2020-4597",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4597"
    },
    {
      "cve": "CVE-2020-4599",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4599"
    },
    {
      "cve": "CVE-2020-4600",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4600"
    },
    {
      "cve": "CVE-2020-4602",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4602"
    },
    {
      "cve": "CVE-2020-4604",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-4604"
    },
    {
      "cve": "CVE-2020-7608",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-7608"
    },
    {
      "cve": "CVE-2020-8244",
      "notes": [
        {
          "category": "description",
          "text": "In IBM Security Guardium existieren mehrere Schwachstellen. Die Schwachstellen sind einerseits in verschiedenen Komponenten des Produktes vorhanden sowie im Produkt selbst. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode auszuf\u00fchren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Angriff zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "5104",
          "316562"
        ]
      },
      "release_date": "2021-01-13T23:00:00.000+00:00",
      "title": "CVE-2020-8244"
    }
  ]
}