CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-38379
https://notcve.org/view.php?id=CVE-2021-38379
The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local Information Disclosure. El Hub en CFEngine Enterprise versiones 3.6.7 hasta 3.18.0, presenta permisos no seguros que permiten una divulgación local de información • https://cfengine.com/blog/2021/cve-2021-38379-and-cve-2021-36756 https://docs.cfengine.com/docs/3.18/enterprise-cfengine-guide.html • CWE-276: Incorrect Default Permissions •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2019-19394
https://notcve.org/view.php?id=CVE-2019-19394
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0. Se encontró un problema en Arista EOS. Los paquetes ARP malformados específicos pueden impactar el software mediante el reenvío de paquetes VxLAN. Este problema se encuentra en el código EOS VxLAN de Arista, que puede permitir a los atacantes bloquear el agente VxlanSwFwd. • https://cfengine.com/company/blog-detail/cve-2019-19394-mission-portal-javascript-injection-vulnerability • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2019-9929
https://notcve.org/view.php?id=CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions. Northern.tech CFEngine Enterprise 3.12.1 tiene permisos no seguros • https://cfengine.com/company/blog-detail/cve-2019-9929-internal-authentication-secrets-leaked-in-logs https://cfengine.com/product/latest-release • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2005-3137
https://notcve.org/view.php?id=CVE-2005-3137
The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960. • http://bugs.gentoo.org/show_bug.cgi?id=107871 http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 http://secunia.com/advisories/17037 http://secunia.com/advisories/17038 http://secunia.com/advisories/17040 http://secunia.com/advisories/17142 http://secunia.com/advisories/17182 http://www.debian.org/security/2005/dsa-835 http://www.debian.org/security/2005/dsa-836 http://www.mandriva.com/security/advisories?name=MDKSA&# •
CVSS: 2.1EPSS: 0%CPEs: 41EXPL: 0CVE-2005-2960
https://notcve.org/view.php?id=CVE-2005-2960
cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a different vulnerability than CVE-2005-3137. • http://bugs.gentoo.org/show_bug.cgi?id=107871 http://groups.google.com/group/gnu.cfengine.help/browse_thread/thread/fc25e7d98f8ba401/38151ed821803be0#38151ed821803be0 http://secunia.com/advisories/17037 http://secunia.com/advisories/17038 http://secunia.com/advisories/17040 http://secunia.com/advisories/17142 http://secunia.com/advisories/17182 http://secunia.com/advisories/17215 http://www.debian.org/security/2005/dsa-835 http://www.debian.org/security/2005/dsa-836 http://www. •