[{"CVE":"CVE-2019-14822","severity":"moderate","public_date":"2019-09-13T07:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1880","RHSA-2020:3978"],"bugzilla":"1717958","bugzilla_description":"CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-862","affected_packages":["ibus-0:1.5.19-11.el8","ibus-0:1.5.17-11.el7","redhat-coreos-43.82.202007300301.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14822.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2015-3245","severity":"moderate","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233043","bugzilla_description":"CVE-2015-3245 libuser: does not filter newline characters in the GECOS field","cvss_score":1.7,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:N/I:N/A:P","CWE":"CWE-138","affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3245.json"},{"CVE":"CVE-2015-3246","severity":"important","public_date":"2015-07-23T00:00:00Z","advisories":["RHSA-2015:1483","RHSA-2015:1482"],"bugzilla":"1233052","bugzilla_description":"CVE-2015-3246 libuser: Security flaw in handling /etc/passwd file","cvss_score":6.8,"cvss_scoring_vector":"AV:L/AC:L/Au:S/C:C/I:C/A:C","CWE":null,"affected_packages":["libuser-0:0.56.13-8.el6_7","libuser-0:0.60-7.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3246.json"},{"CVE":"CVE-2013-4509","severity":"low","public_date":"2013-10-25T00:00:00Z","advisories":[],"bugzilla":"1027028","bugzilla_description":"CVE-2013-4509 ibus: visible password entry flaw","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4509.json"},{"CVE":"CVE-2012-5630","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"884685","bugzilla_description":"CVE-2012-5630 libuser: TOCTOU race conditions by copying and removing directory trees","cvss_score":3.7,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-367","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5630.json"},{"CVE":"CVE-2012-5644","severity":"low","public_date":"2013-03-28T00:00:00Z","advisories":[],"bugzilla":"885724","bugzilla_description":"CVE-2012-5644 libuser: (Complete) Information disclosure when moving user's home directory","cvss_score":4.7,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5644.json"},{"CVE":"CVE-2011-0002","severity":"moderate","public_date":"2011-01-10T00:00:00Z","advisories":["RHSA-2011:0170"],"bugzilla":"643227","bugzilla_description":"CVE-2011-0002 libuser creates LDAP users with a default password","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":["libuser-0:0.54.7-2.1.el5_5.2","libuser-0:0.52.5-1.1.el4_8.1","libuser-0:0.56.13-4.el6_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0002.json"}]