578 matches found
ADM not giving deploy option after running deployment_type.py
When running the deploymenttype.py to prepare an ADM instance for HA pairing, after reboot the deploy tab is missing...
ADM Click Jack Vulnerability: X-Frame-Option/ Content-Security-Policy's frame ancestor entry missing
Vulnerability scanner detecting HTTP Click-Jacking vulnerability on the ADM management IP as the response from the ADM is missing theX-Frame-Options or the Content-Security-Policy’s frame ancestor option...
High Disk Space Usage on Citrix ADM Causes MAS GUI Inaccessibility
High Disk space usage on Citrix ADM Unable to login to the ADM through GUI / CLI. df -h output shows close to 100% Disk utilization. 150GB of disk space was consumed by /var/mps/dbpgsql/data/pglog. The DB log file indicates thatlot of error messages related to MAS DB went Read-Replica mode. This...
Citrix ADM: Upgrade of ADC from ADM fails after exactly 30 mins
When you check the 'Execution history' of the upgrade, you will find Build upload through SCP to ADC failing at exactly 30 mins...
Troubleshooting "Database streaming channel is broken between HA nodes" error on ADM HA pair
The issue started occurring after the upgrade. This issue is only applicable to ADM devices in HA on 12.1 and 13.0 versions...
Not seeing non-addressable vservers on ADM Cloud
Not able to see any non-addressable with ip:0.0.0.0 vservers on the ADM...
ASUSTOR ADM File Explorer Path Traversal Vulnerability
ASUSTOR ADM is a set of operating systems from ASUSTOR dedicated to ASUSTOR NAS storage devices.File Explorer is one of the file browsers. A directory traversal vulnerability exists in File Explorer in ASUSTOR ADM version 3.1.1. An attacker can exploit this vulnerability by modifying the 'file1'...
ASUSTOR ADM Denial of Service Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A denial of service vulnerability exists in the login page of ASUSTOR ADM version 3.1.1, which can be exploited to prevent users from logging in by placing malformed text in the login page name...
ASUSTOR ADM Information Disclosure Vulnerability (CNVD-2018-26926)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An information disclosure vulnerability exists in the share.cgi file in ASUSTOR ADM version 3.1.1, which can be exploited by an attacker to obtain a key with the help of the 'encryptkey' URL parameter...
ASUSTOR ADM Information Disclosure Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An information disclosure vulnerability exists in the SNMP settings page in ASUSTOR ADM version 3.1.1, which can be exploited by an attacker to obtain SNMP passwords in plaintext...
ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-25177)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the snmp.cgi file in ASUSTOR ADM version 3.1.1. The vulnerability can be exploited to execute system commands without authentication using the...
ASUSTOR ADM Cross-Site Scripting Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A cross-site scripting vulnerability exists in the login page of ASUSTOR ADM version 3.1.1. A remote attacker can exploit this vulnerability to execute JavaScript code via the System Announcement feature...
CVE-2018-12317
OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" POST parameter...
CVE-2018-12316
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter...
Command injection
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter...
CVE-2018-12315
Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change account passwords without entering the current password...
Design/Logic Flaw
Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change account passwords without entering the current password...
CVE-2018-12319
Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title...