<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">CVE-2017-13771</DocumentTitle>
  <DocumentType>SUSE CVE</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE CVE-2017-13771</ID>
    </Identification>
    <Status>Interim</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>40</Number>
        <Date>2024-10-23T00:55:32Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2021-05-30T14:01:33Z</InitialReleaseDate>
    <CurrentReleaseDate>2024-10-23T00:55:32Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf-cve.pl</Engine>
      <Date>2020-12-27T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="CVE" Type="Summary" Ordinal="1" xml:lang="en">CVE-2017-13771</Note>
    <Note Title="Mitre CVE Description" Type="Description" Ordinal="2" xml:lang="en">Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="4" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="HPE Helion OpenStack 8">
      <Branch Type="Product Name" Name="HPE Helion OpenStack 8">
        <FullProductName ProductID="HPE Helion OpenStack 8" CPE="cpe:/o:suse:hpe-helion-openstack:8">HPE Helion OpenStack 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 12 SP5" CPE="cpe:/o:suse:sle-hpc:12:sp5">SUSE Linux Enterprise High Performance Computing 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP2-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp2">SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp3">SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS" CPE="cpe:/o:suse:sles-espos:12:sp3">SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp3">SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4-ESPOS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS" CPE="cpe:/o:suse:sles-espos:12:sp4">SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp4">SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5" CPE="cpe:/o:suse:sles:12:sp5">SUSE Linux Enterprise Server 12 SP5</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5" CPE="cpe:/o:suse:sle-we:12:sp5">SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server Teradata 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server Teradata 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server Teradata 12 SP3" CPE="cpe:/o:suse:sles_teradata:12:sp3">SUSE Linux Enterprise Server Teradata 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3" CPE="cpe:/o:suse:sles_sap:12:sp3">SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4" CPE="cpe:/o:suse:sles_sap:12:sp4">SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5" CPE="cpe:/o:suse:sles_sap:12:sp5">SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
      </Branch>
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5" CPE="cpe:/o:suse:sle-we:12:sp5">SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 8">
        <FullProductName ProductID="SUSE OpenStack Cloud 8" CPE="cpe:/o:suse:suse-openstack-cloud:8">SUSE OpenStack Cloud 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 9">
        <FullProductName ProductID="SUSE OpenStack Cloud 9" CPE="cpe:/o:suse:suse-openstack-cloud:9">SUSE OpenStack Cloud 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 8">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 8">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:8">SUSE OpenStack Cloud Crowbar 8</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 9">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:9">SUSE OpenStack Cloud Crowbar 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="bash">
      <FullProductName ProductID="bash" CPE="cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*">bash</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="bash-doc">
      <FullProductName ProductID="bash-doc">bash-doc</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="bash-lang">
      <FullProductName ProductID="bash-lang">bash-lang</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libreadline6">
      <FullProductName ProductID="libreadline6">libreadline6</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libreadline6-32bit">
      <FullProductName ProductID="libreadline6-32bit">libreadline6-32bit</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="readline-doc">
      <FullProductName ProductID="readline-doc">readline-doc</FullProductName>
    </Branch>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:bash">bash as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:bash-doc">bash-doc as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:libreadline6">libreadline6 as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:libreadline6-32bit">libreadline6-32bit as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="HPE Helion OpenStack 8">
      <FullProductName ProductID="HPE Helion OpenStack 8:readline-doc">readline-doc as a component of HPE Helion OpenStack 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 12 SP5:bash">bash as a component of SUSE Linux Enterprise High Performance Computing 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:bash">bash as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP2-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP2-BCL:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP2-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:bash">bash as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS:bash">bash as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-ESPOS:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:bash">bash as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-LTSS:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS:bash">bash as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-ESPOS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-ESPOS:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:bash">bash as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:bash">bash as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server Teradata 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server Teradata 12 SP3:bash">bash as a component of SUSE Linux Enterprise Server Teradata 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash">bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP3:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash">bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash-doc">bash-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6">libreadline6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6-32bit">libreadline6-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:readline-doc">readline-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:bash">bash as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-lang" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5:bash-lang">bash-lang as a component of SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP5:bash">bash as a component of SUSE Linux Enterprise Workstation Extension 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:bash">bash as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:bash-doc">bash-doc as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:libreadline6">libreadline6 as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:libreadline6-32bit">libreadline6-32bit as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 8">
      <FullProductName ProductID="SUSE OpenStack Cloud 8:readline-doc">readline-doc as a component of SUSE OpenStack Cloud 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:bash">bash as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:bash-doc">bash-doc as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:libreadline6">libreadline6 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:libreadline6-32bit">libreadline6-32bit as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:readline-doc">readline-doc as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:bash">bash as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:bash-doc">bash-doc as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:libreadline6">libreadline6 as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:libreadline6-32bit">libreadline6-32bit as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 8">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 8:readline-doc">readline-doc as a component of SUSE OpenStack Cloud Crowbar 8</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:bash">bash as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="bash-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:bash-doc">bash-doc as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:libreadline6">libreadline6 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="libreadline6-32bit" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:libreadline6-32bit">libreadline6-32bit as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="readline-doc" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:readline-doc">readline-doc as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet.</Note>
    </Notes>
    <CVE>CVE-2017-13771</CVE>
    <ProductStatuses>
      <Status Type="Known Not Affected">
        <ProductID>HPE Helion OpenStack 8:bash</ProductID>
        <ProductID>HPE Helion OpenStack 8:bash-doc</ProductID>
        <ProductID>HPE Helion OpenStack 8:libreadline6</ProductID>
        <ProductID>HPE Helion OpenStack 8:libreadline6-32bit</ProductID>
        <ProductID>HPE Helion OpenStack 8:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 12 SP5:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP2-BCL:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-ESPOS:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-ESPOS:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-ESPOS:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-ESPOS:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-LTSS:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-ESPOS:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-ESPOS:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-ESPOS:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-ESPOS:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server Teradata 12 SP3:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP3:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:bash-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:libreadline6-32bit</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:readline-doc</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP5:bash</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP5:bash-lang</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:bash</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:bash-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:libreadline6</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:libreadline6-32bit</ProductID>
        <ProductID>SUSE OpenStack Cloud 8:readline-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:bash</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:bash-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:libreadline6</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:libreadline6-32bit</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:readline-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:bash</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:bash-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:libreadline6</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:libreadline6-32bit</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 8:readline-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:bash</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:bash-doc</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:libreadline6</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:libreadline6-32bit</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:readline-doc</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>5</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>9.8</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
  </Vulnerability>
</cvrfdoc>
