PatchTheCVEgonicus vulnerabilities
Recent CVEs affecting gonicus products. 2 tracked.
gonicus has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-08-15. Highest priority: CVE-2019-11187 (score 64/100).
- CVE-2019-11187 CRITICAL 9.8 UPGRADE MITIGATE Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into a
- CVE-2018-1000528 MEDIUM 6.1 MITIGATE MITIGATE GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (X
FAQ
How do I fix gonicus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gonicus being exploited right now?
None of the tracked gonicus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gonicus CVE should I patch first?
CVE-2019-11187 currently ranks highest (64/100): Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into a.