PatchTheCVEsnare vulnerabilities and fixes
Recent CVEs affecting snare, with upgrade or downgrade steps. 2 tracked.
snare has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-01-08. Highest priority: CVE-2011-5247 (score 52/100).
- CVE-2011-5250 MEDIUM 6.5 UPGRADE Snare for Linux before 1.7.0 has CSRF in the web interface.
- CVE-2011-5247 HIGH 7.5 UPGRADE Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePasswo
FAQ
How do I fix snare vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is snare being exploited right now?
None of the tracked snare CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which snare CVE should I patch first?
CVE-2011-5247 currently ranks highest (52/100): Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePasswo.