Detections
Analytics
Alpine: nomad: security update to 0.9.6-r0
medium Tenable Cloud Security Plugin ID 405860
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack
involves unsanitized HTTP parameters being output in a form page, allowing attackers to leak cookies and
other sensitive information from ca/uhn/fhir/to/BaseController.java via a specially crafted URL. (This
module is not generally used in production systems so the attack surface is expected to be low, but
affected systems are recommended to upgrade immediately.) (CVE-2019-12741)
See Also
https://security.alpinelinux.org/vuln/CVE-2019-12741
Plugin Details
Severity: Medium
ID: 405860
Version: Revision 1.30
Type: Local
Published: 10/31/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 8.67
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: CVE-2019-12741
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 6/5/2019