[{"CVE":"CVE-2019-19882","severity":"important","public_date":"2020-01-07T00:00:00Z","advisories":[],"bugzilla":"1788452","bugzilla_description":"CVE-2019-19882 shadow-utils: local users can obtain root access because setuid programs are misconfigured","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-592","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-19882.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss3_score":"7.8"},{"CVE":"CVE-2018-16588","severity":"low","public_date":"2018-09-06T00:00:00Z","advisories":[],"bugzilla":"1626123","bugzilla_description":"CVE-2018-16588 shadow-utils: useradd-mkdirs.patch creates intermediate directories with 0777","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-732","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16588.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2018-7169","severity":"moderate","public_date":"2017-11-14T00:00:00Z","advisories":[],"bugzilla":"1546241","bugzilla_description":"CVE-2018-7169 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-271","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7169.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2017-12424","severity":"moderate","public_date":"2017-03-31T00:00:00Z","advisories":[],"bugzilla":"1478359","bugzilla_description":"CVE-2017-12424 shadow-utils: Buffer overflow via newusers tool","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-120","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12424.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2017-2616","severity":"moderate","public_date":"2017-02-22T00:00:00Z","advisories":["RHSA-2017:0654","RHSA-2017:0907"],"bugzilla":"1418710","bugzilla_description":"CVE-2017-2616 util-linux: Sending SIGKILL to other processes with root privileges via su","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-267","affected_packages":["coreutils-0:8.4-46.el6","util-linux-0:2.23.2-33.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2616.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.5"},{"CVE":"CVE-2016-6251","severity":"low","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358622","bugzilla_description":"REJECTED CVE-2016-6251 shadow-utils: Potentially unsafe use of getlogin","cvss_score":3.3,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:N","CWE":"CWE-287","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6251.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2016-6252","severity":"moderate","public_date":"2016-07-19T00:00:00Z","advisories":[],"bugzilla":"1358625","bugzilla_description":"CVE-2016-6252 shadow-utils: Incorrect integer handling results in LPE","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6252.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.3"},{"CVE":"CVE-2013-4235","severity":"low","public_date":"2015-02-06T00:00:00Z","advisories":[],"bugzilla":"884658","bugzilla_description":"CVE-2013-4235 shadow-utils: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4235.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"6.7"},{"CVE":"CVE-2006-1174","severity":"low","public_date":"2005-02-23T00:00:00Z","advisories":["RHSA-2007:0276","RHSA-2007:0431"],"bugzilla":"1618029","bugzilla_description":"CVE-2006-1174 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["shadow-utils-2:4.0.3-61.RHEL4","shadow-utils-2:4.0.3-29.RHEL3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-1174.json"}]