diff options
| author | security tracker role <sectracker@soriano.debian.org> | 2020-12-10 08:10:24 +0000 |
|---|---|---|
| committer | security tracker role <sectracker@soriano.debian.org> | 2020-12-10 08:10:24 +0000 |
| commit | 67116d31dfa1bc68d0b08e1ef2e3253f7c3ca134 (patch) | |
| tree | db048047c179a3be8f96dcd3e5220944bc46fc93 /data/CVE/2015.list | |
| parent | 34d68b2abfff12b58b6dba9a6f016334c92efd70 (diff) | |
automatic update
Diffstat (limited to 'data/CVE/2015.list')
| -rw-r--r-- | data/CVE/2015.list | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/CVE/2015.list b/data/CVE/2015.list index 9807b573a6..1ddcba8a0b 100644 --- a/data/CVE/2015.list +++ b/data/CVE/2015.list @@ -12614,9 +12614,9 @@ CVE-2015-5186 (Audit before 2.4.4 in Linux does not sanitize escape characters i NOTE: https://fedorahosted.org/audit/changeset/1122 CVE-2015-5185 (The lookupProviders function in providerMgr.c in sblim-sfcb 1.3.4 and ...) - sblim-sfcb <itp> (bug #754493) -CVE-2015-5184 (The Hawtio console in A-MQ allows remote attackers to obtain sensitive ...) +CVE-2015-5184 (Console: CORS headers set to allow all in Red Hat AMQ. ...) NOT-FOR-US: A-MQ's Hawtio console -CVE-2015-5183 (The Hawtio console in A-MQ does not set HTTPOnly or Secure attributes ...) +CVE-2015-5183 (Console: HTTPOnly and Secure attributes not set on cookies in Red Hat ...) NOT-FOR-US: A-MQ's Hawtio console CVE-2015-5182 (Cross-site request forgery (CSRF) vulnerability in the jolokia API in ...) NOT-FOR-US: A-MQ's Hawtio console |