[Bug 1172794] VUL-1: CVE-2020-13977: nagios: an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration, can modify the Alert Histogram and Trends code

24 Jun 2020

      https://bugzilla.suse.com/show_bug.cgi?id=1172794
https://bugzilla.suse.com/show_bug.cgi?id=1172794#c3

Wolfgang Frisch  changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
          Component|Incidents                   |Security
            Version|unspecified                 |Leap 15.1
         Resolution|WORKSFORME                  |---
           Assignee|security-team@suse.de       |lars.vogdt@suse.com
            Product|SUSE Security Incidents     |openSUSE Distribution

--- Comment #3 from Wolfgang Frisch  ---
Affected:
openSUSE:Leap:15.1
openSUSE:Leap:15.2

Already fixed:
openSUSE:Factory

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠suse.com

tags

participants (1)