Bug 1103278 (CVE-2018-14007) - VUL-0: CVE-2018-14007: xen: XAPI HTTP directory traversal (XSA-271)
Summary: VUL-0: CVE-2018-14007: xen: XAPI HTTP directory traversal (XSA-271)
Status: RESOLVED INVALID
Alias: CVE-2018-14007
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-07-31 15:57 UTC by Johannes Segitz
Modified: 2018-12-10 06:24 UTC (History)
3 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Comment 1 Johannes Segitz 2018-07-31 15:57:29 UTC 
This is a embargoed bug. This means that this information is not public. Please
- do not talk to other people about this unless they're involved in fixing the issue
- do not submit this into OBS (e.g. fix Leap) until this is public
- do not make this bug public
- Please be aware that the SUSE:SLE-12-SP4:GA codestream is available via OBS. This means
  that you can't submit security fixes for embargoed issues to SLE 12 SP4 GA until they become
  public.

In doubt please talk to us on IRC (#security) or sent us a mail.

CRD: 2018-08-14 17:00 UTC