Groonga

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Groonga records in CISA KEV

No Groonga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Groonga-httpd 1 record LOW

Records

1 record in Groonga-httpd · all components

TI-2019-08739 CVE-2019-11675 · GHSA-2p2g-mpv8-7wjq

The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the…

LOW 30

The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction with logrotate.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00234 Published 2019-05-02 No fix listed CWE-362

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0