CVE-2018-11048

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 contain a XML External Entity XXE Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to...

Xxe

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 contain a XML External Entity XXE Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to...

CVE-2018-11048

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 contain a XML External Entity XXE Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to...

CVE-2018-11048

CVE-2018-11048 affects Dell EMC Data Protection Advisor (DPA) versions 6.2, 6.3, 6.4, 6.5 and IDPA 2.0, 2.1, with a XML External Entity (XXE) Injection in the REST API. An authenticated remote attacker could read certain server files or cause a denial of service by sending crafted DTDs in XML req...

PT-2018-10268

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions 6.2 through 6.5 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.1 Description The issue concerns a XML External Entity XXE Injection vulnerability in the REST API. An...

CVE-2018-11048: Improper Restriction of XML External Entity Reference

Dell EMC Data Protection Advisor, versions 6.2, 6,3, 6.4, 6.5 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 contain a XML External Entity XXE Injection vulnerability in the REST API. An authenticated remote malicious user could potentially exploit this vulnerability to...

Repokid - AWS Least Privilege For Distributed, High-Velocity Deployment

Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid python setup.py develop...

technologyadvice.com XSS vulnerability

Open Bug Bounty ID: OBB-634757 Description| Value ---|--- Affected Website:| technologyadvice.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM) Storage Manager Install Anywhere (SMIA) configuration tool

Summary OpenSSL vulnerabilities were disclosed on January 26, 2017 by the OpenSSL Project. OpenSSL was used by IBM FSM SMIA configuration tool commonly known as Network Advisor. This bulletin addresses the applicable CVEs. Vulnerability Details CVEID: CVE-2017-3730 DESCRIPTION: OpenSSL is...

Security Bulletin: IBM b-type Network/Storage switches is affected by Open Source OpenSSL Vulnerabilities (OpenSSL and Node.JS consumers).

Summary IBM b-type Network/Storage switches has addressed the following vulnerabilities CVE-2017-3730, CVE-2017-3731, CVE-2017-3732, CVE-2016-7055. Vulnerability Details CVEID: CVE-2017-3730 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. By sendin...

Security Bulletin: Open Source OpenSSL Vulnerabilities in IBM Network Advisor

Summary Open Source OpenSSL Vulnerabilities in IBM Network Advisor CVE-2017-3733. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-3733 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error during a renegotiate handshake when the original handshake did not...

Security Bulletin: Open Source OpenSSL Vulnerabilities affect IBM Network Advisor

Summary Open Source OpenSSL Vulnerabilities affect IBM Network Advisor CVE-2016-7053, CVE-2016-7054, CVE-2016-7055 Vulnerability Details CVEID: CVE-2016-7053 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference when processing invalid encodings in the...

Security Bulletin: Directory Traversal vulnerabilities impact IBM Network Advisor.

Summary Multiple Directory Traversal vulnerabilities affect IBM b-type SAN Network Advisor CVE-2016-8204, CVE-2016-8205,CVE-2016-8206, CVE-2016-8207. Vulnerability Details CVEID: CVE-2016-8204 DESCRIPTION: Brocade Network Advisor could allow a remote attacker to traverse directories on the system...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Network Advisor (CVE-2016-3425, CVE-2016-3427, CVE-2016-0695).

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology used in IBM Network Advisor. Vulnerability Details CVEID: CVE-2016-3427 DESCRIPTION: An unspecified vulnerability related to the JMX component has complete confidentiality impact, complete integrity impact, and complete...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK (or if just using Runtime state IBM Java Runtime) affect IBM Network Advisor (CVE-2015-4748, CVE-2016-2613, CVE-2016-2601, CVE-2016-4749, CVE-2016-2625)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Network Advisor. These issues were disclosed as part of the IBM Java SDK updates in July 2015. Vulnerability Details CVEID: CVE-2015-4748 DESCRIPTION: An unspecified vulnerability related to the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM b-type SAN Network Advisor (CVE-2016-0483, CVE-2016-0466, CVE-2016-0475)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Network Advisor. These issues were disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details CVEID: CVE-2016-0483 DESCRIPTION: An unspecified vulnerability related to the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Network Advisor.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM b-type SAN Network Advisor. These issues were disclosed as part of the IBM Java SDK updates for October 2015 CVE-2015-4872, CVE-2015-4911, CVE-2015-4893, CVE-2015-4803. Vulnerability Details CVEID:...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Network Advisor (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Network Advisor. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker could exploit this...

Security Bulletin: Multiple vulnerabilities in Brocade Network Advisor affect IBM PureApplication System.

Summary Brocade Network Advisor is used by IBM PureApplication System. IBM PureApplication System has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-8204 DESCRIPTION: Brocade Network Advisor could allow a remote attacker to traverse directories on the system. An attacker cou...

Access Control Vulnerability in Hitachi Infrastructure Analytics Advisor

Overview An Access Control Vulnerability was found in Hitachi Infrastructure Analytics Advisor. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate...