[Bug 1064980] VUL-0: CVE-2016-10517: redis: POST and Host: strings lack a check that allows "Cross Protocol Scripting"

20 Nov 2017

      http://bugzilla.novell.com/show_bug.cgi?id=1064980

SMASH SMASH  changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|                            |
                   |                            |CVSSv3:RedHat:CVE-2016-1051
                   |                            |7:6.1:(AV:N/AC:L/PR:N/UI:R/
                   |                            |S:C/C:L/I:L/A:N)
                   |                            |CVSSv2:NVD:CVE-2016-10517:4
                   |                            |.3:(AV:N/AC:M/Au:N/C:P/I:N/
                   |                            |A:N)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

bugzilla_noreply＠novell.com

tags

participants (1)