[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f430q5wR4x5gznV25RZGNeQXxzxxp_UJ8rBLrYK5rmw8":3,"g5a-risk:CVE-2019-18900":159},{"success":4,"data":5,"meta":157},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":25,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":33,"references":66,"referencesCount":81,"weaknesses":82,"weaknessesCount":91,"isActivelyExploited":92,"cisaInfo":25,"otxData":25,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":155,"notableEvents":156},"CVE-2019-18900","What is CVE-2019-18900?",": Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: SUSE CaaS Platform 3.0 libzypp versions prior to 16.21.2-27.68.1. SUSE Linux Enterprise Server 12 libzypp versions prior to 16.21.2-2.45.1. SUSE Linux Enterprise Server 15 17.19.0-3.34.1.",": Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed ...","2020-01-24T16:15:10.943","2020-02-27T23:15:11.967",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":36,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED",null,1.8,1.4,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":35,"ImpactScore":27},"meissner@suse.de","Secondary",{"Version":20,"VectorString":32,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":33,"BaseSeverity":34,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",4,"MEDIUM",2.5,[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":22,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":42,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00301,[45,45,45,45,45,45,45],"Low",[49,54,59,63],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"opensuse","libzypp","*","cpe:2.3:a:opensuse:libzypp:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"suse","caas_platform","3.0","cpe:2.3:o:suse:caas_platform:3.0:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":61,"criteria":62,"vulnerable":4},"suse_linux_enterprise_server","12","cpe:2.3:o:suse:suse_linux_enterprise_server:12:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":64,"criteria":65,"vulnerable":4},"15","cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*",[67,71,77],{"url":68,"source":69,"tags":70},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00036.html","Opensuse",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1158763","Suse",[75,76],"Issue Tracking","Vendor Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F03\u002Fmsg00005.html","Debian",[],3,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2019-18900? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-18900, a low severity cyber security vulnerability from 2020. : Incorrect Default Permissions vulnerability in libzypp of ...","CVE-2019-18900, CVE-2019-18900 vulnerability, CVE-2019-18900 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, opensuse security, suse security, libzypp vulnerability, caas_platform vulnerability, suse_linux_enterprise_server vulnerability","\u002Fwhat-is\u002Fcve-2019-18900",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-18900","Cybersecurity","CVE-2019-18900, CVE-2019-18900 vulnerability, CVE-2019-18900 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,133,144],{"Operator":121,"Negate":25,"Nodes":122},"AND",[123,129],{"Operator":124,"Negate":25,"CPEMatch":125},"OR",[126],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":127,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":128,"VersionEndIncluding":25},"805EF031-0F25-472E-AE1A-008755BD5727","16.21.2-27.68.1",{"Operator":124,"Negate":25,"CPEMatch":130},[131],{"Vulnerable":25,"Criteria":58,"MatchCriteriaID":132,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D5ABF09D-B887-4041-9168-5057B668F602",{"Operator":121,"Negate":25,"Nodes":134},[135,140],{"Operator":124,"Negate":25,"CPEMatch":136},[137],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":138,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":139,"VersionEndIncluding":25},"D7A5700D-0E1B-432F-B50D-59C4AB297BDE","16.21.2-2.45.1",{"Operator":124,"Negate":25,"CPEMatch":141},[142],{"Vulnerable":25,"Criteria":62,"MatchCriteriaID":143,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9C649194-B8C2-49F7-A819-C635EE584ABF",{"Operator":121,"Negate":25,"Nodes":145},[146,151],{"Operator":124,"Negate":25,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":150,"VersionEndIncluding":25},"E29CF9A9-8160-4DAA-9B87-D82385C11B23","17.19.0-3.34.1",{"Operator":124,"Negate":25,"CPEMatch":152},[153],{"Vulnerable":25,"Criteria":65,"MatchCriteriaID":154,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AF73A3D9-6566-4CBF-AA5F-5A4B99719A1D",[],[],{"lastModified":11,"cacheTime":158,"version":39},1793198392018,{"score":160,"band":161,"action":162,"scoredAt":163},14,"Info","Track","2026-07-01T10:24:31.304855+00:00"]