Ubuntu 16.04 — gosa — multiple vulnerabilities (3 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 12 August 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4609-1 Related CVEs: CVE-2018-1000528 CVE-2019-11187 CVE-2019-14466 Upstream summary: Fabian Henneke discovered that GOsa incorrectly handled client cookies. An authenticated user could exploit this with a crafted cookie to perform file […]