CVE-2023-36494

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494 F5OS-A vulnerability

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494 F5OS-A vulnerability

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494

The CVE-2023-36494 issue affects F5OS-A, specifically audit-service on F5OS-A 1.4.0 with a path to 1.5.0. The vulnerability allows authenticated, high-privilege users with local access to read undisclosed sensitive information from audit logs. CVSSv3 base score is 4.4 (Medium) with local attack v...

K000134922: F5OS-A vulnerability CVE-2023-36494

Security Advisory Description Audit logs on the F5OS-A system may contain undisclosed sensitive information. CVE-2023-36494 Impact This vulnerability may allow a high privileged authenticated attacker with local access to an F5OS-A system to read undisclosed sensitive information. Security Adviso...

PT-2023-25593 · F5 · F5Os-A

Name of the Vulnerable Software and Affected Versions: F5OS-A affected versions not specified Description: Audit logs on F5OS-A may contain undisclosed sensitive information. Software versions that have reached End of Technical Support EoTS are not evaluated. Recommendations: At the moment, there...

F5 F5OS-A Log Information Disclosure Vulnerability

F5 F5OS-A is an operating system software from F5 Corporation. A log information disclosure vulnerability exists in F5 F5OS-A, which arises from the possibility that audit logs may contain sensitive, undisclosed information...

The vulnerability of the application programming interface of the cloud platform for developing and deploying applications. VMware Tanzu Application Service for VMs (TAS for VMs) and the Isolation Segment management platform allow a malicious actor to gain unauthorized access to protected information.

The vulnerability of the application programming interface of a cloud platform for developing and deploying VMware Tanzu Application Service for VMs TAS for VMs and isolation segment management platform is related to the disclosure of administrator registration data in system audit logs during...

CVE-2023-20891

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF...

CVE-2023-20891

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF...

Information disclosure

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF...

CVE-2023-20891

The CVE-2023-20891 issue affects VMware Tanzu Application Service for VMs and Isolation Segment. A information-disclosure vulnerability arises from credentials being logged in hex encoding within platform system audit logs. A non-admin user with access to these logs could access hex-encoded CF AP...

CVE-2023-20891 VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF...

CVE-2023-20891 VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability

The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system audit logs. A malicious non-admin user who has access to the platform system audit logs can access hex encoded CF...

VMware Tanzu 日志信息泄露漏洞

VMware Tanzu is a modular cloud-native application platform from VMware. A security vulnerability exists in VMware Tanzu Application Service, which originates from the platform's system audit logs recording credentials in hexadecimal encoding, leading to information disclosure...

VMware Tanzu Application Service for VMs and Isolation Segment updates address information disclosure vulnerability (CVE-2023-20891)

3. VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability CVE-2023-20891 The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform...

Insufficient input sanitization on Windows nodes leads to privilege escalation

CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - HIGH 8.8 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes. Am...

CISA and FBI Release Cybersecurity Advisory on Enhanced Monitoring to Detect APT Activity Targeting Outlook Online

The Cybersecurity and Infrastructure Security Agency CISA and Federal Bureau of Investigation FBI have released a joint Cybersecurity Advisory CSA, Enhanced Monitoring to Detect APT Activity Targeting Outlook Online, to provide guidance to agencies and critical infrastructure organizations on...