[{"CVE":"CVE-2020-15250","severity":"low","public_date":"2020-10-12T00:00:00Z","advisories":[],"bugzilla":"1887810","bugzilla_description":"CVE-2020-15250 junit4: TemporaryFolder is shared between all users across system which could result in information disclosure","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15250.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"6.2"},{"CVE":"CVE-2016-9590","severity":"moderate","public_date":"2017-01-12T00:00:00Z","advisories":["RHSA-2017:0359","RHSA-2017:0361","RHSA-2017:0200"],"bugzilla":"1410293","bugzilla_description":"CVE-2016-9590 puppet-swift: installs config file with world readable permissions","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-200","affected_packages":["openstack-puppet-modules-1:8.1.10-2.el7ost","openstack-puppet-modules-1:7.1.5-2.el7ost","puppet-swift-0:9.4.3-3.el7ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9590.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss3_score":"6.5"},{"CVE":"CVE-2015-3406","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209911","bugzilla_description":"CVE-2015-3406 perl-Module-Signature: unsigned files interpreted as signed in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-347","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3406.json"},{"CVE":"CVE-2015-3407","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209915","bugzilla_description":"CVE-2015-3407 perl-Module-Signature: arbitrary code execution during test phase","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3407.json"},{"CVE":"CVE-2015-3408","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209917","bugzilla_description":"CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3408.json"},{"CVE":"CVE-2015-3409","severity":"moderate","public_date":"2015-04-05T00:00:00Z","advisories":[],"bugzilla":"1209918","bugzilla_description":"CVE-2015-3409 perl-Module-Signature: arbitrary modules loading in some circumstances","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-20->CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3409.json"},{"CVE":"CVE-2015-1842","severity":"important","public_date":"2015-03-10T00:00:00Z","advisories":["RHSA-2015:0789","RHSA-2015:0832","RHSA-2015:0831","RHSA-2015:0830","RHSA-2015:0791"],"bugzilla":"1201875","bugzilla_description":"CVE-2015-1842 openstack-puppet-modules: pacemaker configured with default password","cvss_score":9.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-798","affected_packages":["openstack-foreman-installer-0:3.0.22-1.el7ost","openstack-puppet-modules-0:2014.2.13-2.el7ost","openstack-puppet-modules-0:2014.1.2-1.el6ost","openstack-foreman-installer-0:2.0.34-1.el6ost"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1842.json"},{"CVE":"CVE-2013-1437","severity":"low","public_date":"2013-08-21T00:00:00Z","advisories":[],"bugzilla":"996281","bugzilla_description":"CVE-2013-1437 perl-Module-Metadata: incorrectly documents that it does not execute unsafe code","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1437.json"},{"CVE":"CVE-2015-0250","severity":"moderate","public_date":"2012-07-25T00:00:00Z","advisories":["RHSA-2015:2560","RHSA-2016:0041","RHSA-2016:0042","RHSA-2015:2559"],"bugzilla":"1203762","bugzilla_description":"CVE-2015-0250 batik: XML External Entity (XXE) injection in SVG parsing","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0250.json"}]