[{"CVE":"CVE-2019-12795","severity":"low","public_date":"2019-06-05T00:00:00Z","advisories":["RHSA-2019:3553","RHBA-2019:3303"],"bugzilla":"1726505","bugzilla_description":"CVE-2019-12795 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-285","affected_packages":["gvfs-0:1.36.2-6.el8","redhat-coreos-42.81.20191107.0"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12795.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"4.5"},{"CVE":"CVE-2019-12447","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728562","bugzilla_description":"CVE-2019-12447 gvfs: mishandling of file ownership in daemon/gvfsbackendadmin.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12447.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12448","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728564","bugzilla_description":"CVE-2019-12448 gvfs: race condition in daemon/gvfsbackendadmin.c due to admin backend not implementing query_info_on_read/write","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-364","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12448.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","cvss3_score":"6.4"},{"CVE":"CVE-2019-12449","severity":"moderate","public_date":"2019-05-29T00:00:00Z","advisories":["RHBA-2020:3180","RHSA-2020:1766"],"bugzilla":"1728567","bugzilla_description":"CVE-2019-12449 gvfs: mishandling of file's user and group ownership in daemon/gvfsbackendadmin.c due to unavailability of root privileges","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-282","affected_packages":["redhat-coreos-43.82.202007300301.0","gvfs-0:1.36.2-8.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12449.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-3827","severity":"moderate","public_date":"2018-12-27T00:00:00Z","advisories":["RHSA-2019:2145","RHSA-2019:1517"],"bugzilla":"1665578","bugzilla_description":"CVE-2019-3827 gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-863","affected_packages":["gvfs-0:1.36.2-3.el7","gvfs-0:1.36.2-2.el8_0.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3827.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss3_score":"7.0"}]