SUSE: Security Advisory (SUSE-SU-2015:2195-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:2195-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3059-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3039-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:3279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7674

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

CVE-2020-7674

CVE-2020-7674 affects access-policy up to version 3.1.0. The vulnerability is caused by user input passed to the template function being executed by eval, enabling arbitrary code execution. Affected component: access-policy encoder/parser. Impact is Arbitary Code Execution with the exact exploita...

CVE-2020-7674

access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the template function is executed by the eval function resulting in code execution...

app-policy-auth (=4.5.0) potentially affected by CVE-2020-7674 via access-policy (=3.1.0)

access-policy NPM version =3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on access-policy and may be impacted: - app-policy-auth =4.5.0 Source cves: CVE-2020-7674 Source advisory: SNYK:JS-ACCESSPOLICY-571490...

Security Bulletin: IBM Integration Bus is affected by an Apache Tomcat related vulnerability (CVE-2017-7674)

Summary IBM Integration Bus is affected by an Apache Tomcat related vulnerability CVE-2017-7674. Vulnerability Details CVEID: CVE-2017-7674 DESCRIPTION: Apache Tomcat could provide weaker than expected security, caused by the failure to add an HTTP Vary header to indicate that the response varies...

Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2017-1262)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2017-1261)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7674

An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user...

CVE-2019-7674

The CVE concerns MOBOTIX S14 MX-V4.2.1.61 devices where the /admin/access endpoint accepts a request to set the password to a fixed value (the string “aaaaa”). This represents an authentication weakness enabling password change by an authorized or potentially any user, depending on access control...

Security Bulletin: Multiple Vulnerabilities in Apache Tomcat affects IBM UrbanCode Deploy (CVE-2017-7674, CVE-2017-7675)

Summary Previous releases of IBM UrbanCode Deploy are affected by multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVEID: CVE-2017-7674 DESCRIPTION: Apache Tomcat could provide weaker than expected security, caused by the failure to add an HTTP Vary header indicating that the...

Debian: Security Advisory (DLA-1400-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1400-1] tomcat7 security update

Package : tomcat7 Version : 7.0.56-3+really7.0.88-1 CVE ID : CVE-2017-7674 CVE-2017-12616 CVE-2018-1304 CVE-2018-1305 CVE-2018-8014 Debian Bug : 802312 898935 Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2017-7674 The CORS Filter in Apache Tomcat...

Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SONAS (CVE-2017-7674, CVE-2017-7675)

Summary Vulnerabilities in Apache Tomcat affect IBM SONAS CVE-2017-7674, CVE-2017-7675. IBM SONAS has addressed both CVEs. Vulnerability Details Apache Tomcat is used to provide graphical user interface for managing SONAS. The command line interface CLI interface is unaffected by these issues...

Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM Storwize V7000 Unified (CVE-2017-7674, CVE-2017-7675)

Summary Vulnerabilities in Apache Tomcat affect IBM Storwize V7000 Unified CVE-2017-7674, CVE-2017-7675. IBM Storwize V7000 Unified has addressed both CVEs. Vulnerability Details Apache Tomcat is used to provide graphical user interface for managing IBM Storwize V7000 Unified. The command line...

Security Bulletin: Security vulnerability has been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2017-7674)

Summary Jazz Reporting Service is shipped as a component of Rational Insight. Information about a security vulnerability affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details CVEID: CVE-2017-7674 DESCRIPTION: Apache Tomcat could provide weaker than...