PT-2023-20169 · Apollo · Apollo

Name of the Vulnerable Software and Affected Versions: Apollo versions prior to 2.1.0 Description: Apollo is a configuration management system. There are potential security issues if users expose apollo-configservice to the internet, which is not recommended. This is because there is no...

CVE-2022-27891

Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected servic...

CVE-2022-27891 Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.

Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected servic...

PT-2023-12921 · Palantir · Palantir Gotham

Name of the Vulnerable Software and Affected Versions: Palantir Gotham versions prior to 103.30221005.0 Description: The issue concerns an unauthenticated endpoint in Palantir Gotham that lists all active usernames on the stack with an active session. The affected services have been patched and...

HPESBHF04439 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04440 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Local Escalation of Privilege Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL450 Gen10 Server - Prior to 2.7602-09-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-20...

HPESBHF04444 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00767, 2023.1 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04442 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00730, 2023.1 IPU - 3rd Generation Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04443 rev.1 - Certain HPE Apollo, XL Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

CVE-2015-10043

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

Path traversal

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10043 abreen Apollo path traversal

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10043 abreen Apollo path traversal

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10043

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10043

CVE-2015-10043 describes a path-traversal vulnerability in the abreen Apollo PHP scripts. The issue arises from manipulation of the file argument, affecting an unknown part of the codebase. A patch is available: 6206406630780bbd074aff34f4683fb764faba71, and applying it is recommended to fix the i...

abreen Apollo 路径遍历漏洞

Apollo is a set of PHP scripts by Alex Breen, an individual developer. It is intended to provide a web-based interface for students to upload course assignments. A path traversal vulnerability exists in abreen Apollo, which stems from an unknown partial impact, where manipulation of a parameter...

CVE-2015-10043: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply a patch to fix this issue. The...

PT-2023-10222 · Unknown · Abreen Apollo

Name of the Vulnerable Software and Affected Versions: abreen Apollo affected versions not specified Description: A critical vulnerability was found in abreen Apollo, affecting an unknown part. The manipulation of the file argument leads to path traversal. Recommendations: To fix this issue, it i...

Null pointer dereference

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...

HTTP Request Smuggling

apollo-server is vulnerable to HTTP request smuggling. The vulnerability exists because the library does not properly set the cache-control response header in the batched HTTP requests, allowing an attacker to smuggle HTTP requests...