[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2019-12449":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":27,"cwes":28,"cpes":30,"technologies":40,"references":45,"score":53,"epss_score":54,"epss_percentile":55,"is_kev":56,"cisa_kev_date_added":57,"cisa_kev_due_date":57,"cisa_ssvc":58,"attack_mappings":64,"exploits":71},242788,"CVE-2019-12449","EUVD-2019-4058","An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon\u002Fgvfsbackendadmin.c mishandles a file's user and group ownership during move (and copy with G_FILE_COPY_ALL_METADATA) operations from admin:\u002F\u002F to file:\u002F\u002F URIs, because root privileges are unavailable.","2019-05-29T17:29:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","NONE","MEDIUM","PARTIAL",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":17,"vectorString":23,"integrityImpact":16,"userInteraction":24,"attackComplexity":25,"availabilityImpact":16,"privilegesRequired":25,"confidentialityImpact":26},"UNCHANGED","3.1",5.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N","REQUIRED","LOW","HIGH",true,[29],"CWE-755",[31,32,33,34,35,36,37,38,39],"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","cpe:2.3:a:gnome:gvfs:*:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",[41,42,43,44],"Gnome Gvfs","Canonical Ubuntu Linux","Fedoraproject Fedora","Opensuse Leap",[46,47,48,49,50,51,52],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00008.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00009.html","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F07\u002F09\u002F3","https:\u002F\u002Fgitlab.gnome.org\u002FGNOME\u002Fgvfs\u002Fcommit\u002F409619412e11be146a31b9a99ed965925f1aabb8","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFP6BFQUPQRVRRFIYHFWWB6RHJNEB4LGQ\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FM2DQVOL5H5BVLXYCEB763DCIYJQ7ZUQ2\u002F","https:\u002F\u002Fusn.ubuntu.com\u002F4053-1\u002F",0.49,0.01815,0.78549,false,null,{"timestamp":57,"automatable":59,"tech_impact":60,"exploitation":61,"cisa_decision":62,"cisa_remediation_timeline":63},"no","partial","none",{},"FSU",[65],{"name":66,"source":67,"tactics":68,"technique_id":70},"Exploit Public-Facing Application","attack_vector",[69],"initial-access","T1190",[]]