CVE-2017-14604 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-14604 Interim 1 25 2025-03-25T00:46:07Z current 2021-05-30T14:02:18Z 2025-03-25T00:46:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-14604 GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-June/004191.html E-Mail link for SUSE-SU-2018:1694-1 https://lists.suse.com/pipermail/sle-security-updates/2018-July/004307.html E-Mail link for SUSE-SU-2018:2058-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CPMUV6DUNWXFSUMAA655S6JQ3S4D5OHB/#CPMUV6DUNWXFSUMAA655S6JQ3S4D5OHB E-Mail link for openSUSE-SU-2018:2210-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Liberty Linux 7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 gnome-shell-search-provider-nautilus gnome-shell-search-provider-nautilus-3.20.3-23.12.10 gnome-shell-search-provider-nautilus-3.20.3-23.3.14 gnome-shell-search-provider-nautilus-3.20.3-23.6.1 libnautilus-extension1 libnautilus-extension1-3.20.3-23.12.10 libnautilus-extension1-3.20.3-23.3.14 libnautilus-extension1-3.20.3-23.6.1 libnautilus-extension1-32bit-3.20.3-23.3.14 libnautilus-extension1-32bit-3.20.3-23.6.1 nautilus nautilus-2.28.4-1.16.21.3.1 nautilus-3.20.3-23.12.10 nautilus-3.20.3-23.3.14 nautilus-3.20.3-23.6.1 nautilus-3.22.3-4.el7_4 nautilus-32bit-2.28.4-1.16.21.3.1 nautilus-devel-2.28.4-1.16.21.3.1 nautilus-devel-3.20.3-23.3.14 nautilus-devel-3.20.3-23.6.1 nautilus-devel-3.22.3-4.el7_4 nautilus-extensions-3.22.3-4.el7_4 nautilus-lang nautilus-lang-2.28.4-1.16.21.3.1 nautilus-lang-3.20.3-23.12.10 nautilus-lang-3.20.3-23.3.14 nautilus-lang-3.20.3-23.6.1 nautilus-x86-2.28.4-1.16.21.3.1 typelib-1_0-Nautilus-3_0-3.20.3-23.3.14 typelib-1_0-Nautilus-3_0-3.20.3-23.6.1 nautilus-3.22.3-4.el7_4 as a component of SUSE Liberty Linux 7 nautilus-devel-3.22.3-4.el7_4 as a component of SUSE Liberty Linux 7 nautilus-extensions-3.22.3-4.el7_4 as a component of SUSE Liberty Linux 7 gnome-shell-search-provider-nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 libnautilus-extension1-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 libnautilus-extension1-32bit-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 nautilus-lang-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Desktop 12 SP3 gnome-shell-search-provider-nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libnautilus-extension1-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libnautilus-extension1-32bit-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 nautilus-lang-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 gnome-shell-search-provider-nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libnautilus-extension1-3.20.3-23.12.10 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 nautilus-lang-3.20.3-23.12.10 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 nautilus-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA nautilus-32bit-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA nautilus-lang-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA nautilus-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nautilus-32bit-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nautilus-lang-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA nautilus-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 nautilus-32bit-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 nautilus-lang-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 nautilus-x86-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 gnome-shell-search-provider-nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server 12 SP3 libnautilus-extension1-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server 12 SP3 nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server 12 SP3 nautilus-lang-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server 12 SP3 gnome-shell-search-provider-nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libnautilus-extension1-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA nautilus-lang-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA gnome-shell-search-provider-nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 libnautilus-extension1-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 nautilus-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 nautilus-lang-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Server 12 SP4 gnome-shell-search-provider-nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server 12 SP5 libnautilus-extension1-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server 12 SP5 nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server 12 SP5 nautilus-lang-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server 12 SP5 nautilus-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nautilus-32bit-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nautilus-lang-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 nautilus-x86-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 gnome-shell-search-provider-nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libnautilus-extension1-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 nautilus-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 nautilus-lang-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 gnome-shell-search-provider-nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libnautilus-extension1-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 nautilus-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 nautilus-lang-3.20.3-23.12.10 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 nautilus-devel-2.28.4-1.16.21.3.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 nautilus-devel-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 typelib-1_0-Nautilus-3_0-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 nautilus-devel-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 typelib-1_0-Nautilus-3_0-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 nautilus-devel-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 typelib-1_0-Nautilus-3_0-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libnautilus-extension1-32bit-3.20.3-23.3.14 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 libnautilus-extension1-32bit-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libnautilus-extension1-32bit-3.20.3-23.6.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 gnome-shell-search-provider-nautilus as a component of HPE Helion OpenStack 8 libnautilus-extension1 as a component of HPE Helion OpenStack 8 nautilus as a component of HPE Helion OpenStack 8 nautilus-lang as a component of HPE Helion OpenStack 8 nautilus as a component of SUSE Linux Enterprise Server 11 SP4 LTSS gnome-shell-search-provider-nautilus as a component of SUSE Linux Enterprise Server 12 SP2-BCL libnautilus-extension1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL nautilus as a component of SUSE Linux Enterprise Server 12 SP2-BCL nautilus-lang as a component of SUSE Linux Enterprise Server 12 SP2-BCL gnome-shell-search-provider-nautilus as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libnautilus-extension1 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS nautilus as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS nautilus-lang as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS gnome-shell-search-provider-nautilus as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libnautilus-extension1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nautilus as a component of SUSE Linux Enterprise Server 12 SP4-LTSS nautilus-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gnome-shell-search-provider-nautilus as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libnautilus-extension1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 nautilus as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 nautilus-lang as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 gnome-shell-search-provider-nautilus as a component of SUSE OpenStack Cloud 8 libnautilus-extension1 as a component of SUSE OpenStack Cloud 8 nautilus as a component of SUSE OpenStack Cloud 8 nautilus-lang as a component of SUSE OpenStack Cloud 8 gnome-shell-search-provider-nautilus as a component of SUSE OpenStack Cloud 9 libnautilus-extension1 as a component of SUSE OpenStack Cloud 9 nautilus as a component of SUSE OpenStack Cloud 9 nautilus-lang as a component of SUSE OpenStack Cloud 9 gnome-shell-search-provider-nautilus as a component of SUSE OpenStack Cloud Crowbar 8 libnautilus-extension1 as a component of SUSE OpenStack Cloud Crowbar 8 nautilus as a component of SUSE OpenStack Cloud Crowbar 8 nautilus-lang as a component of SUSE OpenStack Cloud Crowbar 8 gnome-shell-search-provider-nautilus as a component of SUSE OpenStack Cloud Crowbar 9 libnautilus-extension1 as a component of SUSE OpenStack Cloud Crowbar 9 nautilus as a component of SUSE OpenStack Cloud Crowbar 9 nautilus-lang as a component of SUSE OpenStack Cloud Crowbar 9 GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file's Name field ends in .pdf but this file's Exec field launches a malicious "sh -c" command. In other words, Nautilus provides no UI indication that a file actually has the potentially unsafe .desktop extension; instead, the UI only shows the .pdf extension. One (slightly) mitigating factor is that an attack requires the .desktop file to have execute permission. The solution is to ask the user to confirm that the file is supposed to be treated as a .desktop file, and then remember the user's answer in the metadata::trusted field. CVE-2017-14604 SUSE Liberty Linux 7:nautilus-3.22.3-4.el7_4 SUSE Liberty Linux 7:nautilus-devel-3.22.3-4.el7_4 SUSE Liberty Linux 7:nautilus-extensions-3.22.3-4.el7_4 SUSE Linux Enterprise Desktop 12 SP3:gnome-shell-search-provider-nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Desktop 12 SP3:libnautilus-extension1-3.20.3-23.3.14 SUSE Linux Enterprise Desktop 12 SP3:libnautilus-extension1-32bit-3.20.3-23.3.14 SUSE Linux Enterprise Desktop 12 SP3:nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Desktop 12 SP3:nautilus-lang-3.20.3-23.3.14 SUSE Linux Enterprise Desktop 12 SP4:gnome-shell-search-provider-nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Desktop 12 SP4:libnautilus-extension1-3.20.3-23.6.1 SUSE Linux Enterprise Desktop 12 SP4:libnautilus-extension1-32bit-3.20.3-23.6.1 SUSE Linux Enterprise Desktop 12 SP4:nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Desktop 12 SP4:nautilus-lang-3.20.3-23.6.1 SUSE Linux Enterprise High Performance Computing 12 SP5:gnome-shell-search-provider-nautilus-3.20.3-23.12.10 SUSE Linux Enterprise High Performance Computing 12 SP5:libnautilus-extension1-3.20.3-23.12.10 SUSE Linux Enterprise High Performance Computing 12 SP5:nautilus-3.20.3-23.12.10 SUSE Linux Enterprise High Performance Computing 12 SP5:nautilus-lang-3.20.3-23.12.10 SUSE Linux Enterprise Server 11 SP1-TERADATA:nautilus-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:nautilus-32bit-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:nautilus-lang-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:nautilus-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:nautilus-32bit-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:nautilus-lang-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP4:nautilus-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP4:nautilus-32bit-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP4:nautilus-lang-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 11 SP4:nautilus-x86-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server 12 SP3:gnome-shell-search-provider-nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Server 12 SP3:libnautilus-extension1-3.20.3-23.3.14 SUSE Linux Enterprise Server 12 SP3:nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Server 12 SP3:nautilus-lang-3.20.3-23.3.14 SUSE Linux Enterprise Server 12 SP3-TERADATA:gnome-shell-search-provider-nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libnautilus-extension1-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:nautilus-lang-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP4:gnome-shell-search-provider-nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP4:libnautilus-extension1-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP4:nautilus-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP4:nautilus-lang-3.20.3-23.6.1 SUSE Linux Enterprise Server 12 SP5:gnome-shell-search-provider-nautilus-3.20.3-23.12.10 SUSE Linux Enterprise Server 12 SP5:libnautilus-extension1-3.20.3-23.12.10 SUSE Linux Enterprise Server 12 SP5:nautilus-3.20.3-23.12.10 SUSE Linux Enterprise Server 12 SP5:nautilus-lang-3.20.3-23.12.10 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nautilus-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nautilus-32bit-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nautilus-lang-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:nautilus-x86-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:gnome-shell-search-provider-nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libnautilus-extension1-3.20.3-23.3.14 SUSE Linux Enterprise Server for SAP Applications 12 SP3:nautilus-3.20.3-23.3.14 SUSE Linux Enterprise Server for SAP Applications 12 SP3:nautilus-lang-3.20.3-23.3.14 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnome-shell-search-provider-nautilus-3.20.3-23.12.10 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libnautilus-extension1-3.20.3-23.12.10 SUSE Linux Enterprise Server for SAP Applications 12 SP5:nautilus-3.20.3-23.12.10 SUSE Linux Enterprise Server for SAP Applications 12 SP5:nautilus-lang-3.20.3-23.12.10 SUSE Linux Enterprise Software Development Kit 11 SP4:nautilus-devel-2.28.4-1.16.21.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:nautilus-devel-3.20.3-23.3.14 SUSE Linux Enterprise Software Development Kit 12 SP3:typelib-1_0-Nautilus-3_0-3.20.3-23.3.14 SUSE Linux Enterprise Software Development Kit 12 SP4:nautilus-devel-3.20.3-23.6.1 SUSE Linux Enterprise Software Development Kit 12 SP4:typelib-1_0-Nautilus-3_0-3.20.3-23.6.1 SUSE Linux Enterprise Software Development Kit 12 SP5:nautilus-devel-3.20.3-23.6.1 SUSE Linux Enterprise Software Development Kit 12 SP5:typelib-1_0-Nautilus-3_0-3.20.3-23.6.1 SUSE Linux Enterprise Workstation Extension 12 SP3:libnautilus-extension1-32bit-3.20.3-23.3.14 SUSE Linux Enterprise Workstation Extension 12 SP4:libnautilus-extension1-32bit-3.20.3-23.6.1 SUSE Linux Enterprise Workstation Extension 12 SP5:libnautilus-extension1-32bit-3.20.3-23.6.1 moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P 4.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L