| Vulnerability Name: | CVE-2019-11841 (CCN-160985) | ||||||||||||||||||||
| Assigned: | 2019-05-13 | ||||||||||||||||||||
| Published: | 2019-05-13 | ||||||||||||||||||||
| Updated: | 2023-06-17 | ||||||||||||||||||||
| Summary: | Golang could allow a remote attacker to conduct spoofing attacks, caused by a flaw in the clearsign package of supplementary Go cryptography libraries. An attacker could exploit this vulnerability to spoof the messages. | ||||||||||||||||||||
| CVSS v3 Severity: | 5.9 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) 5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C)
5.3 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C)
| ||||||||||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
| ||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2019-11841 Source: cve@mitre.org Type: Exploit, Third Party Advisory, VDB Entry cve@mitre.org Source: XF Type: UNKNOWN golang-cve201911841-spoofing(160985) Source: cve@mitre.org Type: Product, Third Party Advisory cve@mitre.org Source: CCN Type: Golang GIT Repository c05e17bb3b2dca130fc919668a96b4bec9eb9442 Source: cve@mitre.org Type: Mailing List, Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Mailing List, Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: UNKNOWN cve@mitre.org Source: CCN Type: Packet Storm Security [05-13-2019] Go Cryptography Libraries Cleartext Message Spoofing Source: cve@mitre.org Type: Third Party Advisory cve@mitre.org Source: cve@mitre.org Type: Exploit, Third Party Advisory cve@mitre.org Source: CCN Type: Full-Disclosure Mailing List, Mon, 13 May 2019 15:27:27 +0200 SEC Consult SA-20190513-0 :: Cleartext message spoofing in supplementary Go Cryptography Libraries (@sec_consult) Source: CCN Type: IBM Security Bulletin 1143484 (Watson Studio Local) Multiple Vulnerabilities in Go affects IBM Watson Studio Local Source: CCN Type: IBM Security Bulletin 6599703 (Db2 On Openshift) Multiple vulnerabilities affect IBM Db2 On Openshift and IBM Db2 and Db2 Warehouse on Cloud Pak for Data Source: CCN Type: WhiteSource Vulnerability Database CVE-2019-11841 | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||