[{"CVE":"CVE-2018-10897","severity":"important","public_date":"2018-07-11T00:00:00Z","advisories":["RHSA-2018:2284","RHSA-2018:2626","RHSA-2018:2285"],"bugzilla":"1600221","bugzilla_description":"CVE-2018-10897 yum-utils: reposync: improper path validation may lead to directory traversal","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-59","affected_packages":["yum-utils-0:1.1.30-42.el6_10","yum-utils-0:1.1.31-46.el7_5"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10897.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2014-0022","severity":"important","public_date":"2014-01-13T00:00:00Z","advisories":["RHSA-2014:1004"],"bugzilla":"1057377","bugzilla_description":"CVE-2014-0022 yum: yum-cron installs unsigned packages","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-252->CWE-347","affected_packages":["yum-updatesd-1:0.9-6.el5_10"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0022.json"},{"CVE":"CVE-2013-1910","severity":"moderate","public_date":"2013-03-27T00:00:00Z","advisories":[],"bugzilla":"910446","bugzilla_description":"yum: Not removing bad metadata and using it in next run","cvss_score":7.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1910.json"},{"CVE":"CVE-2008-3270","severity":"moderate","public_date":"2008-08-14T00:00:00Z","advisories":["RHSA-2008:0815"],"bugzilla":"457113","bugzilla_description":"CVE-2008-3270 yum-rhn-plugin: does not verify SSL certificate for all communication with RHN server","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["yum-rhn-plugin-0:0.5.3-12.el5_2.9"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3270.json"}]