[GHSA-wrxf-x8rm-6ggg] Fluent Fluentd and Fluent-ui use default password

[kenhys]

Updates

• Affected products
• Description
• References
• Summary

Comments
Before:

• Title mentions about Fluentd
• Fluentd was mentioned in Description field
• fluentd was referred in ruby-advisory-db References

After:

• Title should not mention Fluentd because it is out of scope in this vulnerability (Only affects fluent-ui)
• Fluentd should not be mentioned (same reason as title)
• fluentd was removed from References because ruby-advisory-db was also updated
  See Fixed Vulnerability details for GHSA-wrxf-x8rm-6ggg rubysec/ruby-advisory-db#876

NOTE: I've also sent feedback to https://www.cve.org/CVERecord?id=CVE-2020-21514, but not updated yet.

[kenhys]

This is follow-up of #5686

[JonathanLEvans]

Ah, I am sorry. I ment to mention in #5686 that the details, such as the description, come from CVE database. Since GitHub was not the assigning CNA, we cannot change the CVE record. To get the information corrected for everyone, you need to contact MITRE at https://cveform.mitre.org/.

Let us know if you need assistance with this!