PatchTheCVEshift vulnerabilities and fixes
Recent CVEs affecting shift, with upgrade or downgrade steps. 7 tracked.
shift has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2019-07-17. Highest priority: CVE-2017-17876 (score 60/100).
- CVE-2019-8932 HIGH 7.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, O
- CVE-2019-8931 HIGH 7.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) u
- CVE-2019-12914 HIGH 7.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, O
- CVE-2019-12913 MEDIUM 5.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) u
- CVE-2019-12912 MEDIUM 5.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract emails of services (such as Gmail, Outlook, etc.) u
- CVE-2019-12911 HIGH 7.5 UPGRADE Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, O
- CVE-2017-17876 HIGH 7.5 DOWNGRADE Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictio
FAQ
How do I fix shift vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is shift being exploited right now?
None of the tracked shift CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which shift CVE should I patch first?
CVE-2017-17876 currently ranks highest (60/100): Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictio.