VDB
GHSA-xwjw-7gc4-5h47
GHSA-xwjw-7gc4-5h47
PUBLISHED
Record from GitHub Advisory Database · Published May 2, 2022
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Timeline
- May 2, 2022 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-xwjw-7gc4-5h47
vulnetix vdb fixes GHSA-xwjw-7gc4-5h47
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-xwjw-7gc4-5h47/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-4315 advisory
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 url
- https://bugzilla.redhat.com/show_bug.cgi?id=472017 url
- http://secunia.com/advisories/32862 url
- http://www.redhat.com/support/errata/RHSA-2008-1001.html url
- http://www.securitytracker.com/id?1021281 url
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 url
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830 url
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 url
- http://osvdb.org/50278 url