2 lines
2.9 KiB
JSON
2 lines
2.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"Ubuntu Server","vendor":"Microsoft","versions":[{"status":"affected","version":"18.04-LTS"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:azure:-:*:*:*:*:*:*:*","matchCriteriaId":"511CBA4F-AC08-4500-A1FC-1804B84C09A7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'."},{"lang":"es","value":"Existe una omisión de la característica de seguridad en Azure SSH Keypairs, debido a un cambio en la lógica de aprovisionamiento para algunas imágenes de Linux que usan cloud-init, también se conoce como \"Azure SSH Keypairs Security Feature Bypass Vulnerability\"."}],"id":"CVE-2019-0816","lastModified":"2026-06-17T02:08:57.983","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":1.9,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":3.4,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.0"},"exploitabilityScore":1.4,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-09T03:29:00.937","references":[{"source":"secure@microsoft.com","url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00018.html"},{"source":"secure@microsoft.com","tags":["Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0816"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00018.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0816"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-706"}],"source":"nvd@nist.gov","type":"Primary"}]}
|