U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2019-2684

Change History

Modified Analysis by NIST 10/06/2022 1:54:10 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:* versions from (including) 2.1.0 up to (excluding) 2.1.22
     *cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:* versions from (including) 2.2.0 up to (excluding) 2.2.18
     *cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:* versions from (including) 3.0.0 up to (excluding) 3.0.22
     *cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:* versions from (including) 3.11.0 up to (excluding) 3.11.8
     *cpe:2.3:a:apache:cassandra:4.0.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 7.0.0 up to (including) 7.0.97
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 8.5.0 up to (including) 8.5.47
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*
     *cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:* versions from (including) 9.0.1 up to (including) 9.0.28
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:hp:xp7_command_view:*:*:*:*:advanced:*:*:* versions up to (excluding) 8.6.5-00
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Changed CPE Configuration
OR
     *cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
OR
     *cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
     *cpe:2.3:a:redhat:satellite:5.8:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Changed CPE Configuration
OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*
Removed CVSS V3
NIST AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

								
						
Added CVSS V3.1

								
							
							
						
NIST AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Changed Reference Type
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html No Types Assigned
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html Mailing List, Third Party Advisory
Changed Reference Type
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html No Types Assigned
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html Mailing List, Third Party Advisory
Changed Reference Type
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html No Types Assigned
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00013.html Mailing List, Third Party Advisory
Changed Reference Type
http://www.openwall.com/lists/oss-security/2020/09/01/4 No Types Assigned
http://www.openwall.com/lists/oss-security/2020/09/01/4 Mailing List, Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHBA-2019:0959 Third Party Advisory
https://access.redhat.com/errata/RHBA-2019:0959 Mailing List, Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1146 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1146 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1163 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1163 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1164 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1164 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1165 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1165 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1166 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1166 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1238 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1238 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1325 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1325 Third Party Advisory
Changed Reference Type
https://access.redhat.com/errata/RHSA-2019:1518 No Types Assigned
https://access.redhat.com/errata/RHSA-2019:1518 Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/38a01302c92ae513910d8c851a2d111736565bd698be4e3af3e4c063@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67@%3Cannounce.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/43530b91506e2e0c11cfbe691173f5df8c48f51b98262426d7493b67@%3Cannounce.tomcat.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7@%3Cusers.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/71bd3e4e222479c266eaafc8d0c171ef5782a69b52f68df11b650ed7@%3Cusers.tomcat.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108@%3Cannounce.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/c58d6c3b49c615916b163809f963a55421cac2264885739508e68108@%3Cannounce.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/f7f54b4888060d99f59993f006e25005a2b58db0c07ff866bdcd6f17@%3Cdev.tomcat.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7@%3Cuser.cassandra.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r1fd117082b992e7d43c1286e966c285f98aa362e685695d999ff42f7@%3Cuser.cassandra.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce@%3Cuser.cassandra.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r718e01f61b35409a4f7a3ccbc1cb5136a1558a9f9c2cb8d4ca9be1ce@%3Cuser.cassandra.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc@%3Cuser.cassandra.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/rab8d90d28f944d84e4d7852f355a25c89451ae02c2decc4d355a9cfc@%3Cuser.cassandra.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E Mailing List, Patch, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152@%3Cdev.cassandra.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152@%3Cdev.cassandra.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152@%3Cuser.cassandra.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/rcd7544b24d8fc32b7950ec4c117052410b661babaa857fb1fc641152@%3Cuser.cassandra.apache.org%3E Mailing List, Third Party Advisory
Changed Reference Type
https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html No Types Assigned
https://lists.debian.org/debian-lts-announce/2019/05/msg00011.html Third Party Advisory
Changed Reference Type
https://seclists.org/bugtraq/2019/May/75 No Types Assigned
https://seclists.org/bugtraq/2019/May/75 Mailing List, Third Party Advisory
Changed Reference Type
https://security.gentoo.org/glsa/201908-10 No Types Assigned
https://security.gentoo.org/glsa/201908-10 Third Party Advisory
Changed Reference Type
https://support.f5.com/csp/article/K11175903?utm_source=f5support&utm_medium=RSS No Types Assigned
https://support.f5.com/csp/article/K11175903?utm_source=f5support&utm_medium=RSS Third Party Advisory
Changed Reference Type
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us No Types Assigned
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03959en_us Third Party Advisory
Changed Reference Type
https://usn.ubuntu.com/3975-1/ No Types Assigned
https://usn.ubuntu.com/3975-1/ Third Party Advisory
Changed Reference Type
https://www.debian.org/security/2019/dsa-4453 No Types Assigned
https://www.debian.org/security/2019/dsa-4453 Third Party Advisory