CVE-2024-30697

27 May 2024, 01:15

Type	Values Removed	Values Added
Summary	(es) Se descubrió un problema en ROS2 Galactic Geochelone en ROS_VERSION 2 y ROS_PYTHON_VERSION 3, donde el sistema transmite mensajes en texto sin formato, lo que permite a los atacantes acceder a información confidencial a través de un ataque de intermediario. NOTA: esto es cuestionado por varios terceros que creen que no había pruebas razonables para determinar la existencia de una vulnerabilidad.
Summary	(en) An issue was discovered in ROS2 Galactic Geochelone in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.	(en) Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.
References	{'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/2', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/3', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/4', 'source': 'cve@mitre.org'} {'url': 'http://www.openwall.com/lists/oss-security/2024/04/23/5', 'source': 'cve@mitre.org'} {'url': 'https://github.com/yashpatelphd/CVE-2024-30697', 'source': 'cve@mitre.org'}

---

01 May 2024, 19:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/5 -

---

01 May 2024, 18:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/3 -

---

01 May 2024, 17:15

Type	Values Removed	Values Added
References		() http://www.openwall.com/lists/oss-security/2024/04/23/2 - () http://www.openwall.com/lists/oss-security/2024/04/23/4 -
Summary		(es) Se descubrió un problema en ROS2 Galactic Geochelone en ROS_VERSION 2 y ROS_PYTHON_VERSION 3, donde el sistema transmite mensajes en texto sin formato, lo que permite a los atacantes acceder a información confidencial a través de un ataque de intermediario. NOTA: esto es cuestionado por varios terceros que creen que no había pruebas razonables para determinar la existencia de una vulnerabilidad.

---

17 Apr 2024, 01:15

Type	Values Removed	Values Added
Summary	(en) An issue was discovered in ROS2 Galactic Geochelone in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack.	(en) An issue was discovered in ROS2 Galactic Geochelone in ROS_VERSION 2 and ROS_PYTHON_VERSION 3, where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

---

09 Apr 2024, 08:15

Type	Values Removed	Values Added
New CVE

---