Harnessing the power of identity management (IDaaS) in the cloud

Sometimes, consumers have it easy. Take, for example, when they accidentally lock themselves out of their personal email. Their solution? Reset the password. With one click, they're able to change their old, complicated password with a new, more memorable one. Self-service password reset is aweso...

Changing the Monolith—Part 4: Quick tech wins for a cloud-first world

You may have heard that identity is the “new” perimeter. Indeed, with the proliferation of phishing attacks over the past few years, one of the best ways to secure data is to ensure that identity—the primary way we access data—can be trusted. How do we secure identity? Start by evaluating how use...

IBM Security Secret Cross-Site Scripting Vulnerability

IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A cross-site scripting vulnerability exists in IBM Security Secret. The...

Virtual Desktop Infrastructure (VDI) – Risks and Solutions

Leverage the benefits of VDI without opening yourself to security risk. Guardicore provides user access management and microsegmentation for Citrix...

Guardicore Centra Integration now available on CyberArk Marketplace

Privileged Access Management is part of a zero-trust model. Guardicore strengthens its offering by integrating with CyberArk...

Microsoft Security—a Leader in 5 Gartner Magic Quadrants

Gartner has named Microsoft Security a Leader in five Magic Quadrants. This is exciting news that we believe speaks to the breadth and depth of our security offerings. Gartner places vendors as Leaders who demonstrate balanced progress and effort in all execution and vision categories. This means...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private Identity and Access Management (CVE-2019-4610)

Summary A security vulnerability affects IBM Cloud Private Identity and Access Management Vulnerability Details CVEID: CVE-2019-4610 DESCRIPTION: IBM Cloud private could provide weaker than expected security, caused by the use of an API key granting access to pultiple resources. An authenticated...

Nextcloud: Improper integrity protection of server-side encryption keys

The public keys used for the server-side encryption are not integrity-protected. These can easily replaced by anyone who has access to the data-at-rest data even when the per-user-keys are enabled, as described in https://nextcloud.com/security/threat-model/. This holds true for all key types -...

Design/Logic Flaw

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior t...

CVE-2019-0072

Summary: CVE-2019-0072 describes an information-disclosure vulnerability in Juniper Networks SBR Carrier related to the identity and access management certificate generation procedure. Affected versions are 8.4.1 before 8.4.1R13 and 8.5.0 before 8.5.0R4. The issue arises from unprotected storage ...

CVE-2019-0072 SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior t...

PT-2019-4133

Name of the Vulnerable Software and Affected Versions Juniper Networks SBR Carrier versions 8.4.1 through 8.4.1R12 Juniper Networks SBR Carrier versions 8.5.0 through 8.5.0R3 Description The issue is related to an Unprotected Storage of Credentials vulnerability in the identity and access...

How Can Akamai Identity Cloud Help With Regulatory Compliance?

Regulatory compliance related to personal identifiable information PII is continuously being enacted around the world as the amount of breaches and data abuse continues to grow. Understanding the variances between the many different privacy and data protection laws can be challenging for companie...

7 Essential Features of a Perfect Privileged Access Management Solution

By Owais Sultan Privileged accounts have access to the most valuable corporate information, which is why they are often targeted by attackers. This is a post from HackRead.com Read the original post: 7 Essential Features of a Perfect Privileged Access Management Solution...

CB Customer Spotlight: Q&A with MEDNAX’s Don Cox

With over 30 years of experience in the technology landscape, Don Cox knows what it takes to be a leader in the industry. Currently residing as the CISO at MEDNAX, the physician-led healthcare organization headquartered in Sunrise, FL, Cox is responsible for cyber operations and engineering,...

IBM Cloud Private Identity and Access Management Cross-Site Request Forgery Vulnerability

IBM Cloud Private is a set of enterprise private cloud solutions from IBM in the United States. The product is built on Kubernetes and container technologies.Identity and Access Management is one of the identity and access management components. A cross-site request forgery vulnerability exists i...

Security Bulletin: IBM Cloud Private Identity and Access Management is vulnerable to a cross-site request forgery attack (CVE-2019-4117)

Summary IBM Cloud Private Identity and Access Management is vulnerable to a cross-site request forgery attack Vulnerability Details CVEID: CVE-2019-4117 DESCRIPTION: IBM Cloud Private is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized...

CVE-2019-9884

eClass platform ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page...

Design/Logic Flaw

eClass platform ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page...

CVE-2019-9884 eClass platform contains a Broken Access Control vulnerability

eClass platform ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page...