CVE-2022-40258

AMI Megarac Weak password hashes for Redfish & API...

CVE-2022-40258

AMI Megarac Weak password hashes for Redfish & API...

Design/Logic Flaw

AMI Megarac Weak password hashes for Redfish & API...

CVE-2022-40258 Weak password hashes for Redfish & API

AMI Megarac Weak password hashes for Redfish & API...

CVE-2022-40258

CVE-2022-40258 affects AMI MegaRAC BMC software, describing weak password hashes for Redfish and API. Technical details from connected sources show that older MegaRAC devices use MD5 with a global salt, while newer devices use SHA-512 with per-user salts, enabling potential password cracking. Rel...

CVE-2022-40258 Weak password hashes for Redfish & API

AMI Megarac Weak password hashes for Redfish & API...

AMI MegaRAC 安全漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

CVE-2022-26872

AMI Megarac Password reset interception via API...

CVE-2022-26872

CVE-2022-26872 (AMI MegaRAC BMC): password reset interception via API could enable an attacker to alter passwords through social engineering and, if exploited, enable remote control of affected servers and deployment of malware or firmware implants. Public discussions summarize the vulnerability ...

CVE-2022-26872 Password reset interception via API

AMI Megarac Password reset interception via API...

CVE-2022-26872 Password reset interception via API

AMI Megarac Password reset interception via API...

PT-2023-1336 · Ami · Ami Megarac

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC affected versions not specified Description: The issue is related to insufficient password hash computation in the Redfish and API components of the AMI MegaRAC firmware. This could allow a remote attacker to gain unauthorized...

Amazon Linux AMI : postgresql92 (ALAS-2023-1657)

The version of postgresql92 installed on the remote host is prior to 9.2.24-3.68. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1657 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...

Amazon Linux AMI : php70-pecl-memcached (ALAS-2023-1673)

The version of php70-pecl-memcached installed on the remote host is prior to 3.2.0-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1673 advisory. PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection...

Amazon Linux AMI : vim (ALAS-2023-1664)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1664 advisory. The target's backtrace indicates that libc has detected a heap error or that the target was executing a heap function when it stopped. This could be due to heap corruption, passing a bad pointer to a heap...

Amazon Linux AMI : postgresql95 (ALAS-2023-1660)

The version of postgresql95 installed on the remote host is prior to 9.5.24-1.83. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1660 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...

Amazon Linux AMI : postgresql93 (ALAS-2023-1658)

The version of postgresql93 installed on the remote host is prior to 9.3.25-1.73. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1658 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...

Amazon Linux AMI : bcel (ALAS-2023-1668)

The version of bcel installed on the remote host is prior to 5.2-7.2.10. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1668 advisory. Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an...

Amazon Linux AMI : krb5 (ALAS-2023-1667)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1667 advisory. Integer overflow vulnerabilities in PAC parsing CVE-2022-42898 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for...

Amazon Linux AMI : postgresql94 (ALAS-2023-1659)

The version of postgresql94 installed on the remote host is prior to 9.4.26-1.78. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1659 advisory. When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a...