Vulnerabilities

TI-2023-15833 CVE-2023-32551 · GHSA-3cfj-vhx9-vcmp

Landscape Open Redirect

LOW 27

Landscape allowed URLs which caused open redirection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0032 Published 2023-06-06 Fixed in 19.10.05 CWE-601

TI-2023-15832 CVE-2023-32550 · GHSA-qx9h-hx3f-jr6w

MEDIUM 46

Landscape's server-status page exposed sensitive system information.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00449 Published 2023-06-06 Fixed in 19.10.05 CWE-497

TI-2023-15831 CVE-2023-32549 · GHSA-w6xh-rjx5-x9m5

LOW 34

Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00546 Published 2023-06-06 Fixed in 19.10.05 CWE-338