[{"CVE":"CVE-2018-14036","severity":"moderate","public_date":"2018-07-13T00:00:00Z","advisories":[],"bugzilla":"1601019","bugzilla_description":"CVE-2018-14036 accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-22","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14036.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"5.0"},{"CVE":"CVE-2012-6655","severity":"low","public_date":"2012-09-17T00:00:00Z","advisories":[],"bugzilla":"1130538","bugzilla_description":"CVE-2012-6655 accountsservice: local encrypted password disclosure when changing password","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6655.json"}]