How To Build a Better Bug Bounty Program

Editor’s Note: Sam Bocetta, a guest author on the Carbon Black blog, is a freelance journalist specializing in U.S. diplomacy and national security, with emphases on technology trends in cyber warfare, cyber defense, and cryptography. Every software company in the world, regardless of whether the...

The HITRUST Common Security Framework: Not Just for Healthcare Anymore

The HITRUST 2019 conference took place last month in Dallas, Texas, and covered important topics such as risk management, compliance, third-party assurance, cybersecurity, medical devices, and the Internet of Things IoT. As speakers and sponsors, we saw much enthusiasm about HITRUST Common Securi...

Description of the security update for SharePoint Enterprise Server 2016: June 11, 2019

None None...

The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software management tool allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability in the web interface of the Cisco Prime Collaboration Assurance management software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser or gain...

CVE-2019-1856

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to the...

CVE-2019-1856

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to the...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to the...

CVE-2019-1856

Cisco Prime Collaboration Assurance (PCA) web-based management interface vulnerability (CVE-2019-1856) allows unauthenticated remote attackers to perform cross-site scripting (XSS) by abusing insufficient validation of data from external devices. A successful exploit could execute arbitrary scrip...

CVE-2019-1856: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to the...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to the...

PT-2019-2061

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance PCA affected versions not specified Description A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance PCA exists due to insufficient validation of data supplied by...

Oracle Critical Patch Update Advisory - April 2019

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...

Description of the security update for SharePoint Enterprise Server 2016: April 9, 2019

None None...

Update to Microsoft Checks

Part of the glamorous life of an ASV involves a rigorous Quality Assurance program to ensure that we are the best ASV's we can possibly be. Some of those efforts are not as readily apparent to our clients as others; but on some occasions, we like to share when our work directly benefits those who...

The vulnerability in the web interface of software for network monitoring in Cisco Network Assurance Engine allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the software web interface for network monitoring in the Cisco Network Assurance Engine lies in the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...

The vulnerability of the Quality of Voice Reporting component of the Cisco Prime Collaboration Assurance software solution allows attackers to enhance their privileges.

The vulnerability of the Quality of Voice Reporting component in the highly converged Cisco HyperFlex infrastructure is related to insufficient authentication control. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

Description of the security update for SharePoint Enterprise Server 2016: March 12, 2019

None None...

CVE-2019-1662

A vulnerability in the Quality of Voice Reporting QOVR service of Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this...

CVE-2019-1662 Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability

A vulnerability in the Quality of Voice Reporting QOVR service of Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this...

Cisco Prime Collaboration Assurance Authorization Issues Vulnerability

Cisco Prime Collaboration Assurance PCA is a suite of enterprise collaboration network management solutions from Cisco. The product supports a unified management console to simplify the management of unified communications and video collaboration networks, as well as rapid deployment of...