CVE-2015-6816
ganglia-web before 3.7.1 allows remote attackers to bypass authenticat ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Amazon (high), Ubuntu (medium).
Description
ganglia-web before 3.7.1 allows remote attackers to bypass authentication.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | ganglia, ganglia-debuginfo, ganglia-devel and 4 more | 3.7.2-2.19.amzn1 and 1 more |
| debian 11 | ganglia, ganglia-web | 3.6.0-1 and 1 more |
| debian 12 | ganglia, ganglia-web | 3.6.0-1 and 1 more |
| debian 13 | ganglia-web | 3.7.5+debian-1 |
| debian 14 | ganglia, ganglia-web | 3.6.0-1 and 1 more |
| echo | ganglia, ganglia-web | 3.6.0-1 and 1 more |
| ubuntu 18.04-ESM | ganglia-web | no fix listed |
| ubuntu 20.04-ESM | ganglia-web | no fix listed |
Show all 18 entries from 8 sources
| Source | Package | Fixed in |
|---|---|---|
| amazon linux 1 | ganglia | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-debuginfo | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-devel | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-gmetad | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-gmond | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-gmond-python | 3.7.2-2.19.amzn1 |
| amazon linux 1 | ganglia-web | 3.7.1-2.19.amzn1 |
| debian 11 | ganglia | 3.6.0-1 |
| debian 11 | ganglia-web | 3.7.5+debian-1 |
| debian 12 | ganglia | 3.6.0-1 |
| debian 12 | ganglia-web | 3.7.5+debian-1 |
| debian 13 | ganglia-web | 3.7.5+debian-1 |
| debian 14 | ganglia | 3.6.0-1 |
| debian 14 | ganglia-web | 3.7.5+debian-1 |
| echo | ganglia | 3.6.0-1 |
| echo | ganglia-web | 3.7.5+debian-1 |
| ubuntu 18.04-ESM | ganglia-web | no fix listed |
| ubuntu 20.04-ESM | ganglia-web | no fix listed |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170362.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169641.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169788.html
- http://www.openwall.com/lists/oss-security/2015/09/04/2
- http://www.openwall.com/lists/oss-security/2015/09/05/6
- http://www.securityfocus.com/bid/92146
- https://bugzilla.redhat.com/show_bug.cgi?id=1260562
- https://github.com/ganglia/ganglia-web/issues/267