Multiple F5 BIG-IP Products Privilege Enhancement Vulnerability

F5 BIG-IP Analytics and others are products of F5 Corporation in the U.S. F5 BIG-IP Analytics is a suite of Web application performance analytics software. the APM is a suite of solutions that provide secure and unified access to business-critical applications and networks. and the LTM is a local...

CVE-2017-0423

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1,...

CVE-2017-0423

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1,...

CVE-2017-0423

CVE-2017-0423 is an elevation-of-privilege vulnerability in the Android Bluetooth stack. A proximate attacker could leverage a separate Bluetooth stack vulnerability to manage access to documents on Android devices. Affected products/versions include Android 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

ForgeRock OpenAM - Access Management XML External Entity Injection Vulnerability

ForgeRock OpenAM - Access Management is the United States ForgeRock company's set of open source single sign-on framework SSO, which provides a core identity services Core Server to achieve a transparent single sign-on in a network architecture such as centralized, distributed single sign-on. An...

CVE-2016-10097

XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...

CVE-2016-10097

XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...

CVE-2016-10097

CVE-2016-10097 affects ForgeRock OpenAM - Access Management 10.1.0. An XML External Entity (XXE) vulnerability exists in the endpoint /SSOPOST/metaAlias/%realm%/idpv2, allowing remote attackers to read arbitrary files via the SAMLRequest parameter. The issue is confirmed by multiple sources in co...

CVE-2016-10097

XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...

Information Disclosure Vulnerability in Multiple Micro Focus Products

Micro Focus Host Access Management and Security Server MSS, formerly known as Attachmate Host Access Management and Security Server and others are products of Micro Focus, a British company.MSS is a MSS is a server that provides access management and security; Reflection for the Web RWeb, formerl...

Directory traversal

Administrative Server in Micro Focus Host Access Management and Security Server MSS and Reflection for the Web RWeb and Reflection Security Gateway RSG and Reflection ZFE ZFE allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory...

CVE-2016-5765

Administrative Server in Micro Focus Host Access Management and Security Server MSS and Reflection for the Web RWeb and Reflection Security Gateway RSG and Reflection ZFE ZFE allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory...

CVE-2016-5765

The CVE-2016-5765 entry describes a remote, unauthenticated directory-traversal information-disclosure in Micro Focus MSS and related products (RWeb, RSG, ZFE, and older components). Affected: MSS 12.3 before 12.3.326, MSS 12.2 before 12.2.342; RSG 12.1 before 12.1.362; RWeb 12.3 before 12.3.312,...

CVE-2016-5765

Administrative Server in Micro Focus Host Access Management and Security Server MSS and Reflection for the Web RWeb and Reflection Security Gateway RSG and Reflection ZFE ZFE allows remote unauthenticated attackers to read arbitrary files via a specially crafted URL that allows limited directory...

CVE-2016-3025

The CVE-2016-3025 issue affects IBM Security Access Manager for Mobile and IBM Security Access Manager (Web/Mobile) where inadequate account lockout settings allow brute-forcing remote authentication. Affected: IBM Security Access Manager for Mobile 8.0.x (before 8.0.1.4 IF3) and 9.x (before 9.0....

The vulnerability of the Unified Infrastructure Manager, a monitoring program for IT infrastructure, allows a perpetrator to bypass the authentication process through the LDAP service.

The vulnerability of the Unified Infrastructure Manager’s IT-infrastructure monitoring software exists due to an error in the access management subsystem. Exploiting this vulnerability allows a malicious actor to bypass the authentication process through the LDAP service, by providing only the...

libipa_hbac, libsss_idmap, libsss_nss_idmap, libsss_simpleifp, python, sssd security update

CentOS Errata and Security Advisory CESA-2015:2355 Updated sssd packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability...

Department of Education Lambasted Over Database Vulnerabilities

Like the Office of Personnel Management before it, the Department of Education has failed to heed repeated warnings that its systems contain multiple weaknesses. In a House Committee on Oversight and Government Reform hearing held this week, Congressman and committee chair Jason Chaffetz R-Utah...

Micro Focus / NetIQ Access Manager Detection (HTTP)

HTTP based detection of Micro Focus / NetIQ Access Manager. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

JVN#65559247: OpenAM vulnerable to denial-of-service (DoS)

OpenAM provided by ForgeRock is an open source access management software. OpenAM contains a denial-of-service DoS vulnerability due to a flaw in processing Cookies CWE-400. Impact When an OpenAM system is running "site" configuration with multiple instances, an authenticated attacker may be able...