Security Bulletin: Security Vulnerability affects Cloud Foundry for IBM Cloud Private (CVE-2019-3800)

Summary Security Vulnerability affects Cloud Foundry for IBM Cloud Private Vulnerability Details CVEID: CVE-2019-3800 DESCRIPTION: Pivotal Cloud Foundry CL could allow a local authenticated attacker to obtain sensitive information, caused by storing sensitive information in the config when user...

The vulnerability of Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, and 4800 lies in their lack of control over access to certain URLs. This allows attackers to gain unauthorized access to protected information, compromise data integrity, or cause service failures.

The vulnerability of Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, and 4800 is related to deficiencies in access control to certain URL addresses. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information,...

The vulnerability of the BPDU-frames redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series allows a hacker to cause service failure.

The vulnerability of the BPDU frame redirection function in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

CVE-2019-3800 CF CLI writes the client id and secret to config file

CF CLI version prior to v6.45.0 bosh release version 1.16.0 writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the...

CVE-2019-3800

CF CLI before v6.45.0 (bosh release 1.16.0) stores the client id and secret in the CLI config file upon authentication with --client-credentials. A local authenticated user with access to that config can impersonate the leaked client. Impact is high for confidentiality and integrity of the creden...

The vulnerability of microprogrammed software in Cisco Aironet Access Points of the 1560, 2800, 3800, and 4800 series is related to resource release errors. This vulnerability allows a malicious actor to cause service failure.

The vulnerability of the microprogramming software on Cisco Aironet Access Points of the 1560, 2800, 3800, and 4800 series is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service failure by sending distorted frames to the vulnerable device...

The vulnerability of microprogrammed software in Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, and 3800 exists due to insufficient validation of input data. This allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Cisco Aironet Access Points of the 1540, 1560, 1800, 2800, and 3800 series exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures...

The software vulnerabilities of Cisco Mobility Express access points from the Cisco Aironet Access Point series 1560, 1800, 2800, and 3800 allow a intruder to cause service interruptions.

The vulnerability of the Cisco Mobility Express software in Cisco Aironet Access Points of the 1560, 1800, 2800, and 3800 series is caused by errors in traffic processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

USN-3800-1: audiofile vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that audiofile incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-13440 It was discovered that audiofile incorrectly...

Ubuntu: Security Advisory (USN-3800-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-0249

A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...

CVE-2018-0226

A vulnerability in the assignment and management of default user accounts for Secure Shell SSH access to Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running Cisco Mobility Express Software could allow an authenticated, remote attacker to gain elevated privileges on an affecte...

Authentication flaw

A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...

Cisco Aironet 3800 Series Access Points Denial of Service Vulnerability

The Cisco Aironet 3800 Series Access Points are a set of wireless access point devices from Cisco, Inc. 802.11w Protected Management Frames PAF is one of the frame encryption protection components. A denial of service vulnerability exists in the Cisco Aironet 3800 series. The vulnerability arises...

Cisco Aironet Authentication Bypass Vulnerability

Cisco Aironet access points provide industry-leading performance that helps enable secure and reliable wireless connectivity. An authentication bypass vulnerability exists in the Cisco Aironet 1800, 2800, and 3800 series. A remote user on the local network can exploit the vulnerability to bypass...

CVE-2017-12283

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

Design/Logic Flaw

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

Race condition

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...

CVE-2017-12283

A vulnerability in the handling of 802.11w Protected Management Frames PAF by Cisco Aironet 3800 Series Access Points could allow an unauthenticated, adjacent attacker to terminate a valid user connection to an affected device, aka Denial of Service. The vulnerability exists because the affected...

CVE-2017-12273

A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthenticated, Layer 2 radio frequency RF adjacent attacker to cause the Access Point AP to reload, resulting in a denial of service DoS condition. The...