Upstream information
Description
** DISPUTED ** An issue was discovered in Netdata 1.10.0. Full Path Disclosure (FPD) exists via api/v1/alarms. NOTE: the vendor says "is intentional."SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 5 |
Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Access Vector | Network |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Partial |
Integrity Impact | None |
Availability Impact | None |
National Vulnerability Database | |
---|---|
Base Score | 5.3 |
Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | Low |
Integrity Impact | None |
Availability Impact | None |
CVSSv3 Version | 3 |
SUSE Security Advisories:
- openSUSE-SU-2021:0647-1, published Sat May 1 21:39:31 2021
- openSUSE-SU-2021:0730-1, published Sat May 15 21:38:50 2021
- openSUSE-SU-2021:1603-1, published Mon Dec 20 21:48:22 2021
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Package Hub 15 SP2 |
| Patchnames: openSUSE-2021-730 |
SUSE Package Hub 15 SP3 |
| Patchnames: openSUSE-2021-1603 |
openSUSE Leap 15.2 |
| Patchnames: openSUSE-2021-647 |
openSUSE Leap 15.3 |
| Patchnames: openSUSE-2021-1603 |
openSUSE Tumbleweed |
| Patchnames: openSUSE-Tumbleweed-2024-11083 |
SUSE Timeline for this CVE
CVE page created: Tue Jun 18 22:39:19 2019CVE page last modified: Tue Sep 3 19:10:49 2024