Approved changes feed: RSS · Atom
cpe:2.3:a:black_duck:coverity:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Black Duck (955ec90c-a671-5474-b283-5788a424fe95) |
|---|---|
| Product | Coverity (0aad3cf3-0a60-5e18-8d5b-819cf95ddac4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1496 |
vulnerable | 2026-06-08 07:49:08.733996 |
Coverity CLI Authentication Bypass
Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account.
Published: 2026-03-27T14:14:01.871Z
Updated: 2026-03-27T14:36:04.188Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12021 |
vulnerable | 2026-06-08 06:23:51.019520 |
Stored Cross-Site Scripting
Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.
Published: 2025-03-31T14:00:20.216Z
Updated: 2025-03-31T15:13:06.890Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.