Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-31799 (GCVE-0-2022-31799)
Vulnerability from cvelistv5 – Published: 2022-05-29 21:25 – Updated: 2024-08-03 07:26- n/a
| URL | Tags |
|---|---|
| https://github.com/bottlepy/bottle/commit/e140e1b… | x_refsource_MISC |
| https://github.com/bottlepy/bottle/commit/a2b0ee6… | x_refsource_MISC |
| https://github.com/bottlepy/bottle/compare/0.12.1… | x_refsource_MISC |
| https://lists.debian.org/debian-lts-announce/2022… | mailing-listx_refsource_MLIST |
| https://www.debian.org/security/2022/dsa-5159 | vendor-advisoryx_refsource_DEBIAN |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T07:26:01.088Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20"
},
{
"name": "[debian-lts-announce] 20220608 [SECURITY] [DLA 3048-1] python-bottle security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html"
},
{
"name": "DSA-5159",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2022/dsa-5159"
},
{
"name": "FEDORA-2022-c1e107f37f",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/"
},
{
"name": "FEDORA-2022-cc9a173168",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Bottle before 0.12.20 mishandles errors during early request binding."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-06-22T02:06:18.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20"
},
{
"name": "[debian-lts-announce] 20220608 [SECURITY] [DLA 3048-1] python-bottle security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html"
},
{
"name": "DSA-5159",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2022/dsa-5159"
},
{
"name": "FEDORA-2022-c1e107f37f",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/"
},
{
"name": "FEDORA-2022-cc9a173168",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2022-31799",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Bottle before 0.12.20 mishandles errors during early request binding."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00",
"refsource": "MISC",
"url": "https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00"
},
{
"name": "https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c",
"refsource": "MISC",
"url": "https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c"
},
{
"name": "https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20",
"refsource": "MISC",
"url": "https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20"
},
{
"name": "[debian-lts-announce] 20220608 [SECURITY] [DLA 3048-1] python-bottle security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html"
},
{
"name": "DSA-5159",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2022/dsa-5159"
},
{
"name": "FEDORA-2022-c1e107f37f",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/"
},
{
"name": "FEDORA-2022-cc9a173168",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2022-31799",
"datePublished": "2022-05-29T21:25:44.000Z",
"dateReserved": "2022-05-29T00:00:00.000Z",
"dateUpdated": "2024-08-03T07:26:01.088Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-31799",
"date": "2026-06-02",
"epss": "0.00323",
"percentile": "0.5556"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bottlepy:bottle:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"0.12.20\", \"matchCriteriaId\": \"8A477F9C-0555-4001-B286-1360CCAEB8D9\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA6FEEC2-9F11-4643-8827-749718254FED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Bottle before 0.12.20 mishandles errors during early request binding.\"}, {\"lang\": \"es\", \"value\": \"Bottle versiones anteriores a 0.12.20, maneja inapropiadamente los errores durante la vinculaci\\u00f3n temprana de peticiones\"}]",
"id": "CVE-2022-31799",
"lastModified": "2024-11-21T07:05:21.203",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2022-06-02T14:15:58.213",
"references": "[{\"url\": \"https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.debian.org/security/2022/dsa-5159\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.debian.org/security/2022/dsa-5159\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-755\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-31799\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-06-02T14:15:58.213\",\"lastModified\":\"2024-11-21T07:05:21.203\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Bottle before 0.12.20 mishandles errors during early request binding.\"},{\"lang\":\"es\",\"value\":\"Bottle versiones anteriores a 0.12.20, maneja inapropiadamente los errores durante la vinculaci\u00f3n temprana de peticiones\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bottlepy:bottle:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.12.20\",\"matchCriteriaId\":\"8A477F9C-0555-4001-B286-1360CCAEB8D9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}]}]}],\"references\":[{\"url\":\"https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.debian.org/security/2022/dsa-5159\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2022/dsa-5159\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
SUSE-SU-2022:3103-1
Vulnerability from csaf_suse - Published: 2022-09-06 08:31 - Updated: 2022-09-06 08:31| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Enterprise Storage 6:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 6:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Enterprise Storage 7:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP3:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Desktop Applications 15 SP4:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Python 2 15 SP3:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Proxy 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Retail Branch Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Retail Branch Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Manager Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:python-bottle-doc-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:python2-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:python-bottle-doc-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:python3-bottle-0.12.13-150000.3.6.1.noarch | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python-bottle",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python-bottle fixes the following issues:\n\n- CVE-2022-31799: Fixed an error mishandling issue that could lead to\n remote denial of service (bsc#1200286).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2022-3103,SUSE-SLE-Module-Desktop-Applications-15-SP3-2022-3103,SUSE-SLE-Module-Desktop-Applications-15-SP4-2022-3103,SUSE-SLE-Module-Python2-15-SP3-2022-3103,SUSE-SLE-Product-HPC-15-2022-3103,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3103,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3103,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3103,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3103,SUSE-SLE-Product-SLES-15-2022-3103,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3103,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3103,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3103,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3103,SUSE-SLE-Product-SLES_SAP-15-2022-3103,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3103,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3103,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3103,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3103,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3103,SUSE-Storage-6-2022-3103,SUSE-Storage-7-2022-3103,openSUSE-SLE-15.3-2022-3103,openSUSE-SLE-15.4-2022-3103",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3103-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2022:3103-1",
"url": "https://www.suse.com/support/update/announcement/2022/suse-su-20223103-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2022:3103-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2022-September/012109.html"
},
{
"category": "self",
"summary": "SUSE Bug 1200286",
"url": "https://bugzilla.suse.com/1200286"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-31799 page",
"url": "https://www.suse.com/security/cve/CVE-2022-31799/"
}
],
"title": "Security update for python-bottle",
"tracking": {
"current_release_date": "2022-09-06T08:31:26Z",
"generator": {
"date": "2022-09-06T08:31:26Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2022:3103-1",
"initial_release_date": "2022-09-06T08:31:26Z",
"revision_history": [
{
"date": "2022-09-06T08:31:26Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"product": {
"name": "python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"product_id": "python-bottle-doc-0.12.13-150000.3.6.1.noarch"
}
},
{
"category": "product_version",
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"product": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"product_id": "python2-bottle-0.12.13-150000.3.6.1.noarch"
}
},
{
"category": "product_version",
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"product": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"product_id": "python3-bottle-0.12.13-150000.3.6.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-desktop-applications:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Python 2 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Module for Python 2 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-python2:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15-LTSS",
"product_id": "SUSE Linux Enterprise Server 15-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_bcl:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP2-BCL",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_bcl:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Proxy 4.1",
"product": {
"name": "SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-proxy:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Retail Branch Server 4.1",
"product": {
"name": "SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-retail-branch-server:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Manager Server 4.1",
"product": {
"name": "SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-manager-server:4.1"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 6",
"product": {
"name": "SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:6"
}
}
},
{
"category": "product_name",
"name": "SUSE Enterprise Storage 7",
"product": {
"name": "SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:ses:7"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.4",
"product": {
"name": "openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP3:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Desktop Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Module for Python 2 15 SP3",
"product_id": "SUSE Linux Enterprise Module for Python 2 15 SP3:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Python 2 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15-LTSS",
"product_id": "SUSE Linux Enterprise Server 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15-LTSS",
"product_id": "SUSE Linux Enterprise Server 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP1-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-BCL",
"product_id": "SUSE Linux Enterprise Server 15 SP2-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-BCL"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Proxy 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Proxy 4.1",
"product_id": "SUSE Manager Proxy 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Proxy 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Retail Branch Server 4.1",
"product_id": "SUSE Manager Retail Branch Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Manager Server 4.1",
"product_id": "SUSE Manager Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Manager Server 4.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Enterprise Storage 6",
"product_id": "SUSE Enterprise Storage 6:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of SUSE Enterprise Storage 7",
"product_id": "SUSE Enterprise Storage 7:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "SUSE Enterprise Storage 7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-bottle-doc-0.12.13-150000.3.6.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:python-bottle-doc-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python2-bottle-0.12.13-150000.3.6.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:python2-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python2-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-bottle-doc-0.12.13-150000.3.6.1.noarch as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:python-bottle-doc-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-bottle-0.12.13-150000.3.6.1.noarch as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:python3-bottle-0.12.13-150000.3.6.1.noarch"
},
"product_reference": "python3-bottle-0.12.13-150000.3.6.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-31799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-31799"
}
],
"notes": [
{
"category": "general",
"text": "Bottle before 0.12.20 mishandles errors during early request binding.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Enterprise Storage 6:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 6:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP4:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Python 2 15 SP3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python3-bottle-0.12.13-150000.3.6.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-31799",
"url": "https://www.suse.com/security/cve/CVE-2022-31799"
},
{
"category": "external",
"summary": "SUSE Bug 1200286 for CVE-2022-31799",
"url": "https://bugzilla.suse.com/1200286"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Enterprise Storage 6:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 6:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP4:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Python 2 15 SP3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python3-bottle-0.12.13-150000.3.6.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Enterprise Storage 6:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 6:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Enterprise Storage 7:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-ESPOS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Desktop Applications 15 SP4:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Module for Python 2 15 SP3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-BCL:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15 SP2-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server 15-LTSS:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Proxy 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Retail Branch Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python2-bottle-0.12.13-150000.3.6.1.noarch",
"SUSE Manager Server 4.1:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python2-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.3:python3-bottle-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python-bottle-doc-0.12.13-150000.3.6.1.noarch",
"openSUSE Leap 15.4:python3-bottle-0.12.13-150000.3.6.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-09-06T08:31:26Z",
"details": "important"
}
],
"title": "CVE-2022-31799"
}
]
}
WID-SEC-W-2023-2964
Vulnerability from csaf_certbund - Published: 2023-11-16 23:00 - Updated: 2025-02-02 23:00Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
Es existieren mehrere Schwachstellen in Splunk Enterprise bezüglich verwendeter Komponenten von Drittanbietern, wie z.B. "OpenSSL", "Python", "protobuf" und "bottle". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht näher spezifizierte Auswirkungen zu verursachen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
In Splunk Enterprise wurde eine Cross-Site-Scripting-Schwachstelle entdeckt. Dies wird durch unsachgemäße Filterung der vom Benutzer eingegebenen Daten in der "Show Syntax Highlighted"-Ansicht auf der "Search Page" verursacht, bevor die Eingaben angezeigt werden. Ein entfernter, authentifizierter Angreifer kann dies ausnutzen, um beliebigen Skriptcode im Sicherheitskontext einer betroffenen Site auszuführen. Ein erfolgreicher Ausnutzen erfordert eine Benutzerinteraktion.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
In Splunk Enterprise existiert eine Schwachstelle. Eingaben im XSLT Format (extensible stylesheet language transformations) werden nicht ausreichend geprüft. Ein Angreifer kann durch das Hochladen einer bösrtig gestalteten XSLT Datei beliebigen Code ausführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Splunk Splunk Enterprise <9.0.8
Splunk / Splunk Enterprise
|
<9.0.8 | ||
|
Splunk Splunk Enterprise <9.1.2
Splunk / Splunk Enterprise
|
<9.1.2 | ||
|
Splunk Splunk Enterprise <9.0.7
Splunk / Splunk Enterprise
|
<9.0.7 | ||
|
Splunk Splunk Enterprise <9.0.9
Splunk / Splunk Enterprise
|
<9.0.9 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Splunk Splunk Enterprise
Splunk / Splunk Enterprise
|
cpe:/a:splunk:splunk:-
|
— | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Splunk Splunk Enterprise <9.3.1
Splunk / Splunk Enterprise
|
<9.3.1 | ||
|
Xerox FreeFlow Print Server v9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:v9
|
v9 | |
|
Splunk Splunk Enterprise <9.1.3
Splunk / Splunk Enterprise
|
<9.1.3 | ||
|
Splunk Splunk Enterprise <9.2.3
Splunk / Splunk Enterprise
|
<9.2.3 | ||
|
Splunk Splunk Enterprise <9.1.6
Splunk / Splunk Enterprise
|
<9.1.6 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
IBM QRadar SIEM 7.5
IBM / QRadar SIEM
|
cpe:/a:ibm:qradar_siem:7.5
|
7.5 | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Dell NetWorker
Dell
|
cpe:/a:dell:networker:-
|
— | |
|
Splunk Splunk Enterprise <9.1.4
Splunk / Splunk Enterprise
|
<9.1.4 | ||
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Splunk Splunk Enterprise <9.2.1
Splunk / Splunk Enterprise
|
<9.2.1 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Splunk Enterprise erm\u00f6glicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um Code auszuf\u00fchren und um nicht n\u00e4her spezifizierte Auswirkungen zu erzielen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2023-2964 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2964.json"
},
{
"category": "self",
"summary": "WID-SEC-2023-2964 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2964"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1103 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1103"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1104 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1104"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1101 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1101"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1102 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1102"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1105 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1105"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1105 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1106"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2023-1107 vom 2023-11-16",
"url": "https://advisory.splunk.com//advisories/SVD-2023-1107"
},
{
"category": "external",
"summary": "PoC auf Nathans Security Blog vom 2023-11-16",
"url": "https://blog.hrncirik.net/cve-2023-46214-analysis"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7101062 vom 2023-12-21",
"url": "https://aix.software.ibm.com/aix/efixes/security/python_advisory7.asc"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2387 vom 2024-01-10",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2387.html"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2024-0109 vom 2024-01-22",
"url": "https://advisory.splunk.com//advisories/SVD-2024-0109"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0464 vom 2024-01-25",
"url": "https://access.redhat.com/errata/RHSA-2024:0464"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7117884 vom 2024-02-14",
"url": "https://www.ibm.com/support/pages/node/7117884"
},
{
"category": "external",
"summary": "XEROX Security Advisory XRX24-005 vom 2024-03-04",
"url": "https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1155 vom 2024-03-06",
"url": "https://access.redhat.com/errata/RHSA-2024:1155"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:1383 vom 2024-03-19",
"url": "https://access.redhat.com/errata/RHSA-2024:1383"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7148094 vom 2024-04-11",
"url": "https://www.ibm.com/support/pages/node/7148094"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-2988 vom 2024-05-28",
"url": "https://linux.oracle.com/errata/ELSA-2024-2988.html"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2024-012 vom 2024-07-02",
"url": "https://www.dell.com/support/kbdoc/de-de/000226582/dsa-2024-012-security-update-for-dell-networker-virtual-edition-networker-management-console-multiple-component-vulnerabilities"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2024-0718 vom 2024-07-02",
"url": "https://advisory.splunk.com/advisories/SVD-2024-0718"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2024-0801 vom 2024-08-12",
"url": "https://advisory.splunk.com//advisories/SVD-2024-0801"
},
{
"category": "external",
"summary": "Splunk Security Advisory SVD-2024-1012 vom 2024-10-14",
"url": "https://advisory.splunk.com//advisories/SVD-2024-1012"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-6AA3B5248F vom 2024-12-08",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-6aa3b5248f"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-C4377D35E6 vom 2024-12-08",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-c4377d35e6"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2024-D335B971E7 vom 2024-12-08",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-d335b971e7"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-11189 vom 2024-12-18",
"url": "https://linux.oracle.com/errata/ELSA-2024-11189.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:0892 vom 2025-02-03",
"url": "https://access.redhat.com/errata/RHSA-2025:0892"
}
],
"source_lang": "en-US",
"title": "Splunk Enterprise: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-02-02T23:00:00.000+00:00",
"generator": {
"date": "2025-02-03T13:06:57.595+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.10"
}
},
"id": "WID-SEC-W-2023-2964",
"initial_release_date": "2023-11-16T23:00:00.000+00:00",
"revision_history": [
{
"date": "2023-11-16T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2023-11-27T23:00:00.000+00:00",
"number": "2",
"summary": "PoC aufgenommen"
},
{
"date": "2023-12-21T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-01-09T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-01-22T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Splunk-SVD aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-02-14T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-03-03T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von XEROX aufgenommen"
},
{
"date": "2024-03-05T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-03-19T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-04-11T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2024-05-28T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-07-01T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Dell und Splunk-SVD aufgenommen"
},
{
"date": "2024-08-12T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Splunk-SVD aufgenommen"
},
{
"date": "2024-10-14T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Splunk-SVD aufgenommen"
},
{
"date": "2024-12-08T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Fedora aufgenommen"
},
{
"date": "2024-12-17T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-02-02T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "18"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Dell NetWorker",
"product": {
"name": "Dell NetWorker",
"product_id": "T024663",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:-"
}
}
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "7.3",
"product": {
"name": "IBM AIX 7.3",
"product_id": "1139691",
"product_identification_helper": {
"cpe": "cpe:/o:ibm:aix:7.3"
}
}
}
],
"category": "product_name",
"name": "AIX"
},
{
"branches": [
{
"category": "product_version",
"name": "7.5",
"product": {
"name": "IBM QRadar SIEM 7.5",
"product_id": "T022954",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:7.5"
}
}
}
],
"category": "product_name",
"name": "QRadar SIEM"
},
{
"branches": [
{
"category": "product_version",
"name": "4.1",
"product": {
"name": "IBM VIOS 4.1",
"product_id": "1522854",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:vios:4.1"
}
}
}
],
"category": "product_name",
"name": "VIOS"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Splunk Splunk Enterprise",
"product": {
"name": "Splunk Splunk Enterprise",
"product_id": "T008911",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:-"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.7",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.0.7",
"product_id": "T031266"
}
},
{
"category": "product_version",
"name": "9.0.7",
"product": {
"name": "Splunk Splunk Enterprise 9.0.7",
"product_id": "T031266-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.0.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.1.2",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.1.2",
"product_id": "T031267"
}
},
{
"category": "product_version",
"name": "9.1.2",
"product": {
"name": "Splunk Splunk Enterprise 9.1.2",
"product_id": "T031267-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.1.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.8",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.0.8",
"product_id": "T032269"
}
},
{
"category": "product_version",
"name": "9.0.8",
"product": {
"name": "Splunk Splunk Enterprise 9.0.8",
"product_id": "T032269-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.0.8"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.1.3",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.1.3",
"product_id": "T032270"
}
},
{
"category": "product_version",
"name": "9.1.3",
"product": {
"name": "Splunk Splunk Enterprise 9.1.3",
"product_id": "T032270-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.1.3"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.2.1",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.2.1",
"product_id": "T033705"
}
},
{
"category": "product_version",
"name": "9.2.1",
"product": {
"name": "Splunk Splunk Enterprise 9.2.1",
"product_id": "T033705-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.2.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.1.4",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.1.4",
"product_id": "T033718"
}
},
{
"category": "product_version",
"name": "9.1.4",
"product": {
"name": "Splunk Splunk Enterprise 9.1.4",
"product_id": "T033718-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.1.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.9",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.0.9",
"product_id": "T033720"
}
},
{
"category": "product_version",
"name": "9.0.9",
"product": {
"name": "Splunk Splunk Enterprise 9.0.9",
"product_id": "T033720-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.0.9"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.3.1",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.3.1",
"product_id": "T038314"
}
},
{
"category": "product_version",
"name": "9.3.1",
"product": {
"name": "Splunk Splunk Enterprise 9.3.1",
"product_id": "T038314-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.3.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.2.3",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.2.3",
"product_id": "T038315"
}
},
{
"category": "product_version",
"name": "9.2.3",
"product": {
"name": "Splunk Splunk Enterprise 9.2.3",
"product_id": "T038315-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.2.3"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.1.6",
"product": {
"name": "Splunk Splunk Enterprise \u003c9.1.6",
"product_id": "T038316"
}
},
{
"category": "product_version",
"name": "9.1.6",
"product": {
"name": "Splunk Splunk Enterprise 9.1.6",
"product_id": "T038316-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:splunk:splunk:9.1.6"
}
}
}
],
"category": "product_name",
"name": "Splunk Enterprise"
}
],
"category": "vendor",
"name": "Splunk"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "v9",
"product": {
"name": "Xerox FreeFlow Print Server v9",
"product_id": "T015632",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:v9"
}
}
}
],
"category": "product_name",
"name": "FreeFlow Print Server"
}
],
"category": "vendor",
"name": "Xerox"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-22570",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2021-22570"
},
{
"cve": "CVE-2022-25883",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2022-25883"
},
{
"cve": "CVE-2022-31799",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2022-31799"
},
{
"cve": "CVE-2023-24329",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-24329"
},
{
"cve": "CVE-2023-3446",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-3446"
},
{
"cve": "CVE-2023-37920",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-37920"
},
{
"cve": "CVE-2023-3817",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-3817"
},
{
"cve": "CVE-2023-43804",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-43804"
},
{
"cve": "CVE-2023-44270",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-44270"
},
{
"cve": "CVE-2023-45803",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in Splunk Enterprise bez\u00fcglich verwendeter Komponenten von Drittanbietern, wie z.B. \"OpenSSL\", \"Python\", \"protobuf\" und \"bottle\". Ein Angreifer kann diese Schwachstellen ausnutzen, um nicht n\u00e4her spezifizierte Auswirkungen zu verursachen."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-45803"
},
{
"cve": "CVE-2023-46213",
"notes": [
{
"category": "description",
"text": "In Splunk Enterprise wurde eine Cross-Site-Scripting-Schwachstelle entdeckt. Dies wird durch unsachgem\u00e4\u00dfe Filterung der vom Benutzer eingegebenen Daten in der \"Show Syntax Highlighted\"-Ansicht auf der \"Search Page\" verursacht, bevor die Eingaben angezeigt werden. Ein entfernter, authentifizierter Angreifer kann dies ausnutzen, um beliebigen Skriptcode im Sicherheitskontext einer betroffenen Site auszuf\u00fchren. Ein erfolgreicher Ausnutzen erfordert eine Benutzerinteraktion."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-46213"
},
{
"cve": "CVE-2023-46214",
"notes": [
{
"category": "description",
"text": "In Splunk Enterprise existiert eine Schwachstelle. Eingaben im XSLT Format (extensible stylesheet language transformations) werden nicht ausreichend gepr\u00fcft. Ein Angreifer kann durch das Hochladen einer b\u00f6srtig gestalteten XSLT Datei beliebigen Code ausf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T032269",
"T031267",
"T031266",
"T033720",
"67646",
"T008911",
"1522854",
"T038314",
"T015632",
"T032270",
"T038315",
"T038316",
"T004914",
"74185",
"T022954",
"1139691",
"T024663",
"T033718",
"398363",
"T033705"
]
},
"release_date": "2023-11-16T23:00:00.000+00:00",
"title": "CVE-2023-46214"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.