[{"CVE":"CVE-2016-4444","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1332644","bugzilla_description":"CVE-2016-4444 setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4444.json"},{"CVE":"CVE-2016-4445","severity":"moderate","public_date":"2016-06-21T00:00:00Z","advisories":["RHBA-2015:2287","RHSA-2016:1267"],"bugzilla":"1339183","bugzilla_description":"CVE-2016-4445 setroubleshoot: insecure use of commands.getstatusoutput in sealert","cvss_score":6.2,"cvss_scoring_vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-1.1.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4445.json"},{"CVE":"CVE-2016-4446","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1339250","bugzilla_description":"CVE-2016-4446 setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-plugins-0:3.0.40-3.1.el6_8","setroubleshoot-plugins-0:3.0.59-2.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4446.json"},{"CVE":"CVE-2016-4989","severity":"important","public_date":"2016-06-21T00:00:00Z","advisories":["RHSA-2016:1267","RHSA-2016:1293"],"bugzilla":"1346461","bugzilla_description":"CVE-2016-4989 setroubleshoot: command injection issues","cvss_score":6.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","CWE":"CWE-77","affected_packages":["setroubleshoot-0:3.0.47-12.el6_8","setroubleshoot-0:3.2.24-4.el7_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4989.json"},{"CVE":"CVE-2015-1815","severity":"important","public_date":"2015-03-26T00:00:00Z","advisories":["RHSA-2015:0729"],"bugzilla":"1203352","bugzilla_description":"CVE-2015-1815 setroubleshoot: command injection via crafted file name","cvss_score":6.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-77","affected_packages":["setroubleshoot-0:2.0.5-7.el5_11","setroubleshoot-0:3.0.47-6.el6_6.1","setroubleshoot-0:3.2.17-4.1.ael7b_1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1815.json"}]