36 matches found
Fedora: Security Advisory for tpm2-tools (FEDORA-2024-3265d70b61)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (SUSE-SU-2024:1636-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tpm2.0-tools (SUSE-SU-2024:1636-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1636-1 advisory. - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2checkquote bsc1223687. -...
SUSE-SU-2024:1636-2 Security update for tpm2.0-tools
This update for tpm2.0-tools fixes the following issues: - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2checkquote bsc1223687. - CVE-2024-29039: Fixed pcr selection value to be compared with the attest bsc1223689...
SUSE-SU-2024:1636-1 Security update for tpm2.0-tools
This update for tpm2.0-tools fixes the following issues: - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2checkquote bsc1223687. - CVE-2024-29039: Fixed pcr selection value to be compared with the attest bsc1223689...
Fedora 39 : tpm2-tools / tpm2-tss (2024-4512dc54af)
The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-4512dc54af advisory. tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Tenable has extracted the preceding description block directly...
Fedora 38 : tpm2-tools / tpm2-tss (2024-3265d70b61)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-3265d70b61 advisory. tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Tenable has extracted the preceding description block directly...
CVE-2024-29038
A flaw was found in the tpm2-tools package. This issue occurs due to a missing check whether the magic number in attest is equal to TPM2GENERATEDVALUE, which can allow an attacker to generate arbitrary quote data that may not be detected by tpm2checkquote...
Fedora 40 : tpm2-tools / tpm2-tss (2024-0c9d3b51d4)
The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-0c9d3b51d4 advisory. tpm2-tss: Fixed CVE-2024-29040 tpm2-tools: Fixed CVE-2024-29038 Fixed CVE-2024-29039 Tenable has extracted the preceding description block directly...
CVE-2021-29038
creationtimestamp| type| source ---|---|--- 2024-02-20 23:26:50+00:00| seen| https://t.me/ctinow/188996 2024-02-20 23:27:00+00:00| seen| https://t.me/ctinow/189004...
CVE-2021-29038
CVE-2021-29038 affects Liferay Portal 7.2.0–7.3.5 and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, and 7.2 before fix pack 17. The issue: password reminder answers are not obfuscated on the page, enabling attackers to perform MITM or shoulder-surfing attacks to steal those a...
CVE-2023-29038
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
Jenkins plugins Multiple Vulnerabilities (2022-04-12)
According to its their self-reported version number, the version of Jenkins plugins running on the remote web server are Jenkins CVS Plugin prior to 2.19.1, Credentials Plugin prior to 1112., Extended Choice Parameter Plugin 346. or earlier, Gerrit Trigger Plugin prior to 2.35.3, Git Parameter...
CVE-2022-29038
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier does not escape the name and description of Extended Choice parameters on views displaying parameters, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...
CVE-2022-29038
CVE-2022-29038 affects Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier. Root cause: the plugin does not escape the name/description of Extended Choice parameters on parameter-views, causing a stored XSS. Impact: vulnerability exploitable by attackers with Item/Configure pe...