CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

History

03 Feb 2024, 11:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html -

02 Nov 2023, 01:59

Type Values Removed Values Added
References (GENTOO) https://security.gentoo.org/glsa/202309-12 - (GENTOO) https://security.gentoo.org/glsa/202309-12 - Third Party Advisory
References (CONFIRM) https://security.netapp.com/advisory/ntap-20230420-0002/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20230420-0002/ - Third Party Advisory
First Time Netapp
Netapp active Iq Unified Manager
CPE cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

29 Sep 2023, 14:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202309-12 -

Information

Published : 2023-03-16 01:15

Updated : 2024-02-28 19:51


NVD link : CVE-2023-28486

Mitre link : CVE-2023-28486

CVE.ORG link : CVE-2023-28486


JSON object : View

Products Affected

netapp

  • active_iq_unified_manager

sudo_project

  • sudo
CWE
CWE-116

Improper Encoding or Escaping of Output