VDB
ALINUX2-SA-2019%3A0065
ALINUX2-SA-2019%3A0065
PUBLISHED
CVSS 3.9000000953674316 LOW
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2017-15111: keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link. CVE-2017-15112: keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.
Risk Scores
CVSS 3.0
3.9000000953674316
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | keycloak-httpd-client-install |
Timeline
- Oct 9, 2019 CVE Published
- Oct 9, 2019 CVE Updated