Weakness (CWE)

CWE-669: Incorrect Resource Transfer Between Spheres

Class Draft

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

Source: MITRE CWE-669

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

Medium 5.2

CVE-2020-15257 Public exploit

containerd-shim API Exposed to Host Network Containers

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s AP…

containerd containerd ctop docker.io Debian Ubuntu Alpine Wolfi Go

Dec 1, 2020
Medium 5.9

CVE-2019-10753

Incorrect Resource Transfer Between Spheres in eclipse-wtp

In all versions prior to version 3.9.6 for eclipse-wtp, all versions prior to version 9.4.4 for eclipse-cdt, and all versions prior to version 3.0.1 for eclipse-groovy, Spotless was resolving dependencies over an insecure channel (http). If the build occurred…

eclipse-wtp com.diffplug.spotless:spotless-eclipse-cdt com.diffplug.spotless:spotless-eclipse-wtp com.diffplug.spotless:spotless-eclipse-groovy Ubuntu Maven

Sep 5, 2019
Medium 5.7

CVE-2019-0042

Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX fire…

Juniper Networks Juniper Identity Management Service Network devices

Apr 10, 2019