[GHSA-wrxf-x8rm-6ggg] Fluent Fluentd and Fluent-ui use default password

[kenhys]

Updates

• Affected products
• Description
• References
• Summary

Comments
Before:

• Title mentions about Fluentd
• Fluentd was mentioned in Description field
• fluentd was referred in ruby-advisory-db References

After:

• Title should not mention Fluentd because it is out of scope in this vulnerability (Only affects fluent-ui)
• Fluentd should not be mentioned (same reason as title)
• fluentd was removed from References because ruby-advisory-db was also updated
  See Fixed Vulnerability details for GHSA-wrxf-x8rm-6ggg rubysec/ruby-advisory-db#876

NOTE: I've also sent feedback to https://www.cve.org/CVERecord?id=CVE-2020-21514, but not updated yet.

[kenhys]

This is follow-up of #5686

[JonathanLEvans]

Ah, I am sorry. I ment to mention in #5686 that the details, such as the description, come from CVE database. Since GitHub was not the assigning CNA, we cannot change the CVE record. To get the information corrected for everyone, you need to contact MITRE at https://cveform.mitre.org/.

Let us know if you need assistance with this!

[kenhys]

@JonathanLEvans
Thanks!

I've sent feedback to https://www.cve.org/CVERecord?id=CVE-2020-21514, and it has been updated now.

Now can we proceed with this PR?

As still fluent/fluentd#2722 was mentioned, I've also sent feedback to CVE-2020-21514.

[advisory-database]

Hi @kenhys! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!