From 613402c4819a4cb8bf74426fe817b364f4423cc4 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Fri, 5 Mar 2021 21:24:56 +0100
Subject: Process some NFUs

---
 data/CVE/2020.list | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

(limited to 'data/CVE/2020.list')

diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index 61b45d906e..0d72bba560 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -1565,7 +1565,7 @@ CVE-2020-35596
 CVE-2020-35595
 	RESERVED
 CVE-2020-35594 (Zoho ManageEngine ADManager Plus before 7066 allows XSS. ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-35593
 	RESERVED
 CVE-2020-35592 (Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the a ...)
@@ -2796,7 +2796,7 @@ CVE-2020-29660 (A locking inconsistency issue was discovered in the tty subsyste
 CVE-2020-29659 (A buffer overflow in the web server of Flexense DupScout Enterprise 10 ...)
 	NOT-FOR-US: Flexense DupScout Enterprise
 CVE-2020-29658 (Zoho ManageEngine Application Control Plus before 100523 has an insecu ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-29657 (In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unh ...)
 	- iotjs <unfixed> (bug #977736; unimportant)
 	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4244
@@ -4041,7 +4041,7 @@ CVE-2020-29136 (In cPanel before 90.0.17, 2FA can be bypassed via a brute-force
 CVE-2020-29135 (cPanel before 90.0.17 has multiple instances of URL parameter injectio ...)
 	NOT-FOR-US: cPanel
 CVE-2020-29134 (TOTVS Fluig Luke 1.7.0 allows directory traversal via a base64 encoded ...)
-	TODO: check
+	NOT-FOR-US: TOTVS Fluig Luke
 CVE-2020-29133 (jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal  ...)
 	NOT-FOR-US: Coremail XT
 CVE-2020-29132
@@ -4262,7 +4262,7 @@ CVE-2020-29034
 CVE-2020-29033
 	RESERVED
 CVE-2020-29032 (Upload of Code Without Integrity Check vulnerability in firmware archi ...)
-	TODO: check
+	NOT-FOR-US: Secomea GateManager
 CVE-2020-29031 (An Insecure Direct Object Reference vulnerability exists in the web UI ...)
 	NOT-FOR-US: GateManager
 CVE-2020-29030
@@ -6451,7 +6451,7 @@ CVE-2020-28052 (An issue was discovered in Legion of the Bouncy Castle BC Java 1
 CVE-2020-28051
 	RESERVED
 CVE-2020-28050 (Zoho ManageEngine Desktop Central before build 10.0.647 allows a singl ...)
-	TODO: check
+	NOT-FOR-US: Zoho ManageEngine
 CVE-2020-28049 (An issue was discovered in SDDM before 0.19.0. It incorrectly starts t ...)
 	{DSA-4783-1 DLA-2436-1}
 	- sddm 0.19.0-1 (bug #973748)
@@ -59434,7 +59434,7 @@ CVE-2020-5150
 CVE-2020-5149
 	RESERVED
 CVE-2020-5148 (SonicWall SSO-agent default configuration uses NetAPI to probe the ass ...)
-	TODO: check
+	NOT-FOR-US: SonicWall
 CVE-2020-5147 (SonicWall NetExtender Windows client vulnerable to unquoted service pa ...)
 	NOT-FOR-US: SonicWall
 CVE-2020-5146 (A vulnerability in SonicWall SMA100 appliance allow an authenticated m ...)
-- 
cgit v1.2.3