Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2020-4590)

Summary IBM Cloud Transformation Advisor has addressed the following vulnerability. CVE-2020-4590 Vulnerability Details CVEID: CVE-2020-4590 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable t...

The vulnerability of the installer for collecting metrics and traces of Intel Advisor tools allows a perpetrator to enhance their privileges.

The vulnerability of the tool for collecting metrics and traces of Intel Advisor tools is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Advisor tools elevation of privilege vulnerability

Intel Advisor tools is a programming-oriented vector optimization and prototyping software from Intel USA. The software analyzes the code and provides code operation efficiency through various analysis methods. An elevation of privilege vulnerability exists in versions of IntelR Advisor tools pri...

CVE-2020-12334

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12334

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12334

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12334

CVE-2020-12334 affects Intel(R) Advisor tools prior to 2020 Update 2. The issue is improper permissions in the installer, potentially enabling local privilege escalation for an authenticated user. Intel’s advisory recommends updating to version 2020 Update 2 or later. CVSSv3.1 vector from the adv...

CVE-2020-12334: Improper Preservation of Permissions

Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-4922

Name of the Vulnerable Software and Affected Versions: IntelR Advisor tools versions prior to 2020 Update 2 Description: The issue is related to improper permissions in the installer for the IntelR Advisor tools, which may allow an authenticated user to potentially enable escalation of privilege...

Intel® Advisor tools Advisory

Summary: A potential security vulnerability in the Intel® Advisor tools may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12334 Description: Improper permissions in the installer for the IntelR...

CloudBees Jenkins Health Advisor by CloudBees Privilege Control Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

CVE-2020-2258

Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint...

CVE-2020-2258

CVE-2020-2258 affects the Jenkins Health Advisor by CloudBees Plugin (versions

Incorrect permission check in cloudbees-jenkins-advisor

cloudbees-jenkins-advisor 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to view an administrative configuration page. cloudbees-jenkins-advisor 3.2.1 requires Overall/Administer to view its administrative...

PT-2020-15483 · Cloudbees +1 · Jenkins Health Advisor By Cloudbees Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Health Advisor by CloudBees Plugin versions 3.2.0 and earlier Description: The issue arises from an incorrect permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view the endpoint, which includes a...

CVE-2020-2258: Incorrect Authorization

Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to view that HTTP endpoint...

Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities.

Summary IBM Cloud Transformation Advisor has addressed multiple Node.js vulnerabilities. Vulnerability Details CVEID: CVE-2020-11080 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an error in the HTTP/2 session frame which is limited to 32 settings by default. By sending...

Security Bulletin: IBM Cloud Transformation Advisor is affected by a Node.js lodash module vulnerability.

Summary IBM Cloud Transformation Advisor has addressed a Node.js lodash module vulnerability. Vulnerability Details Third Party Entry: 183560 DESCRIPTION: Node.js lodash module denial of service CVSS Base score: 7.5 CVSS Temporal Score: See:...

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Cloud Transformation Advisor

Summary There are multiple vulnerabilities found in IBM® Runtime Environment Java™ Version 8.0.6.0 and lower used by IBM Cloud Transformation Advisor. IBM Cloud Transformation Advisor has addressed applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates in May 2020...