CVE-2022-43380

CVE-2022-43380 relates to IBM AIX 7.1/7.2/7.3 and VIOS 3.1 where a non-privileged local user can trigger a denial of service via exploitation of the AIX NFS kernel extension. The IBM Security Bulletin confirms the root cause is in the NFS kernel extension and lists affected filesets and AIX/VIOS ...

CVE-2022-43381

CVE-2022-43381 affects IBM AIX 7.1, 7.2, 7.3 and VIOS 3.1 via the AIX SMB client. A non-privileged local user can trigger a denial of service by exploiting the SMB client daemon. Affected filesets (smbc.rte) include 7.1.0.0–7.1.302.8 and 7.2.0.0–7.2.302.8; remediation is provided as fixes in smbc...

IBM Navigator for i Unauthorized Access Vulnerability

IBM Navigator for i is a console interface from International Business Machines IBM used in IBMi to perform and manage critical tasks in IBMi. IBM Navigator for i in versions 7.3, 7.4, and 7.5 is vulnerable to unauthorized access, where authenticated users using this interface access their entitl...

IBM Navigator for I SQL Injection Vulnerability

IBM Navigator for i is a console interface used in IBMi by International Business Machines IBM to perform and manage critical tasks in IBMi. IBM Navigator for i is vulnerable to SQL injection in versions 7.3, 7.4, and 7.5. The vulnerability stems from the application's lack of validation of...

CVE-2022-43860

IBM Navigator for i (IBM i) versions 7.3–7.5 are affected by CVE-2022-43860 due to an authenticated SQL injection that could disclose user profile attributes via the Navigator interface. The issue affects the IBM HTTP Server for i group PTFs and is remediated by applying the corresponding PTFs: 7...

CVE-2022-43858

CVE-2022-43858 affects IBM Navigator for i versions 7.3, 7.4, and 7.5. An authenticated user can bypass interface checks by modifying a parameter, gaining access to their authorized file-system content through the Navigator interface (i.e., download files they are allowed to view). The Red Hat/RH...

CVE-2022-43857

IBM Navigator for i versions 7.3–7.5 is vulnerable to an information-disclosure issue where an authenticated user can bypass interface checks and download log files by modifying the servlet filter. Affected products: IBM Navigator for i 7.3/7.4/7.5. Root cause: bypass of interface checks via serv...

PT-2022-27034 · Ibm · Ibm Navigator For I

Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue allows an authenticated user to access IBM Navigator for i log files they are authorized to, but not while using this interface. The remote authenticated user can bypass the...

AIX (IJ42800)

The version of AIX installed on the remote host is prior to APAR IJ42800. It is, therefore, affected by a vulnerability as referenced in the IJ42800 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a local user with elevated privileges to exploit a vulnerability in the lpd daemon to cau...

AIX : Multiple Vulnerabilities (IJ42938)

The version of AIX installed on the remote host is prior to APAR IJ42938. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ42938 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX : Multiple Vulnerabilities (IJ43891)

The version of AIX installed on the remote host is prior to APAR IJ43891. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43891 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

AIX (IJ42234)

The version of AIX installed on the remote host is prior to APAR IJ42234. It is, therefore, affected by a vulnerability as referenced in the IJ42234 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rmrlcachefile command to...

AIX : Multiple Vulnerabilities (IJ43893)

The version of AIX installed on the remote host is prior to APAR IJ43893. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ43893 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

DLA-3243-1 php7.3 - security update

Bulletin has no description...

AIX : Multiple Vulnerabilities (IJ44594)

The version of AIX installed on the remote host is prior to APAR IJ44594. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ44594 advisory. - IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel...

How to train your Ghidra

Getting started with Ghidra For about two decades, being a reverse engineer meant that you had to master the ultimate disassembly tool, IDA Pro. Over the years, many other tools were created to complement or directly replace it, but only a few succeeded. Then came the era of decompilation, adding...

Security Bulletin: Security Vulnerability found in zlib fixed in the zlib version shipped with IBM Security Verify for Gateway (RADIUS & WinLogin) and for Bridge (DirSync)

Summary The security vulnerabilityheap-based buffer overflow found in zlib was fixed in the following products: IBM Security Verify Gateway for RADIUS v1.0.8, IBM Security Verify Gateway for Windows Login v1.0.9 and IBM Security Verify Bridge for Directory Sync v1.0.10 Vulnerability Details...

Security Bulletin: Digital Certificate Manager for IBM i is vulnerable to cross-site scripting (CVE-2022-34358)

Summary Digital Certificate Manager for IBM i is vulnerable to a cross-site scripting issue in the old web application as described in the vulnerability details section. IBM i has addressed the applicable CVE with a fix to the Digital Certificate Manage web application as described in the...

Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module

A Cross-site scripting XSS vulnerability in the Announcements module before 6.0.11 from Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML...

CVE-2022-42131

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3...