ByteOS Network

CVE Vulnerability Details :

CVE-2019-3816

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-14 Mar, 2019 | 00:00

Updated At-04 Aug, 2024 | 19:19

▼CVE Numbering Authority (CNA)

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server.

Affected Products

Vendor

[UNKNOWN]

Product

openwsman

Versions

Affected

versions up to and including 2.6.9

Problem Types

Type	CWE ID	Description
CWE	CWE-22	CWE-22

Type: CWE

CWE ID: CWE-22

Description: CWE-22

Metrics

Version	Base score	Base severity	Vector
3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Hyperlink	Resource
http://www.securityfocus.com/bid/107368	vdb-entry
http://www.securityfocus.com/bid/107409	vdb-entry
https://access.redhat.com/errata/RHSA-2019:0638	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V5HJ355RSKMFQ7GRJAHRZNDVXASF7TA/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2HEZ7D7GF3HDF36JLGYXIK5URR66DS4/	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXQP7UDPRZIZ4LM7FEJCTC2EDUYVOR2J/	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00006.html	vendor-advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00065.html	vendor-advisory
https://access.redhat.com/errata/RHSA-2019:0972	vendor-advisory
http://bugzilla.suse.com/show_bug.cgi?id=1122623	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3816	N/A

Hyperlink: http://www.securityfocus.com/bid/107368

Resource:

vdb-entry

Hyperlink: http://www.securityfocus.com/bid/107409

Resource:

vdb-entry

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0638

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V5HJ355RSKMFQ7GRJAHRZNDVXASF7TA/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2HEZ7D7GF3HDF36JLGYXIK5URR66DS4/

Resource:

vendor-advisory

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXQP7UDPRZIZ4LM7FEJCTC2EDUYVOR2J/

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00006.html

Resource:

vendor-advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00065.html

Resource:

vendor-advisory

Hyperlink: https://access.redhat.com/errata/RHSA-2019:0972

Resource:

vendor-advisory

Hyperlink: http://bugzilla.suse.com/show_bug.cgi?id=1122623

Resource: N/A

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3816

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/107368	vdb-entry x_transferred
http://www.securityfocus.com/bid/107409	vdb-entry x_transferred
https://access.redhat.com/errata/RHSA-2019:0638	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V5HJ355RSKMFQ7GRJAHRZNDVXASF7TA/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B2HEZ7D7GF3HDF36JLGYXIK5URR66DS4/	vendor-advisory x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXQP7UDPRZIZ4LM7FEJCTC2EDUYVOR2J/	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00006.html	vendor-advisory x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00065.html	vendor-advisory x_transferred
https://access.redhat.com/errata/RHSA-2019:0972	vendor-advisory x_transferred
http://bugzilla.suse.com/show_bug.cgi?id=1122623	x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3816	x_transferred