Hitachi Infrastructure Analytics Advisor 安全漏洞

Hitachi Infrastructure Analytics Advisor is an IT operations intelligence platform from Hitachi, Ltd. of Japan, including Hitachi Data Center Analytics. A security vulnerability exists in some Hitachi products. An attacker could exploit the vulnerability to read and write specific files. The...

PT-2023-2012 · Hitachi · Hitachi Infrastructure Analytics Advisor +4

Name of the Vulnerable Software and Affected Versions: Hitachi Automation Director versions 8.2.0-00 through 10.6.1-00 Hitachi Infrastructure Analytics Advisor versions 2.0.0-00 through 4.0.0-00 Hitachi Ops Center Automator versions prior to 10.9.1-00 Hitachi Ops Center Analyzer versions prior to...

Information Disclosure Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator

Overview Information Disclosure Vulnerability have been found in Hitachi Automation Director and Hitachi Ops Center Automator. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

Virtuozzo Automator 7.0 Update 2 Hotfix 14 (VA Agent: 7.0.2-402)

The Hotfix 14 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37546 The VA Agent could return an incorrect value for the 'counteriopsused' counter. Vulnerability id: PVA-37639 For containers migrated from Virtuozzo 6 or earlier, only full backups were...

Virtuozzo Automator 7.0 Update 2 Hotfix 13 (VA MN: 7.0.2-674)

Hotfix 13 for Virtuozzo Automator 7.0.2 provides a stability and usability fix. Vulnerability id: PVA-37631 Virtuozzo 6 nodes could appear as offline in Virtuozzo Automator 7 due to disabled support for TLS 1.0 required by VA 6 agents. As a part of the fix, the 'sslhighsecurity' parameter was add...

Virtuozzo Automator 7.0 Update 2 Hotfix 12 (VA MN: 7.0.2-670, VA Agent: 7.0.2-398)

Hotfix 12 for Virtuozzo Automator 7.0.2 provides a new feature as well as stability and usability fixes. Vulnerability id: PVA-37513 Changing VM's OS distribution via API calls could reset the 'cpulimit' and 'iolimit' values. Vulnerability id: PVA-37526 Backup configuration was not respected by...

Virtuozzo Automator 7.0 Update 2 Hotfix 15 (VA MN 7.0.2-680, VA Agent 7.0.2-407)

The Hotfix 15 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37501 pvaagentd could be killed by SIGSEGV. Vulnerability id: PVA-37697, PVA-37707 Coalesce operation could be performed on an outdated cached list of backups. Vulnerability id: PVA-37537 Fre...

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Path Traversal Vulnerability in Hitachi Automation Director and Hitachi Ops Center Automator

Overview A Path Traversal Vulnerability was found in Hitachi Automation Director and Hitachi Ops Center Automator. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 11 (VA MN: 7.0.2-649, VA Agent: 7.0.2-372)

Hotfix 11 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37488 Changing VM's OS distribution via API calls could reset the 'cpulimit' and 'iolimit' values. Vulnerability id: PVA-37495 VA Agent did not return the 'counterioused' value. Vulnerability id:...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 10 (VA MN: 7.0.2-647, VA Agent: 7.0.2-367)

Hotfix 10 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37446 Unable to set "Advanced firewall mode with the default policy Drop" for containers. Vulnerability id: PVA-37477 VA Agent could consume 100% of one CPU. Vulnerability id: PVA-37479 VA Agent...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 9 (VA MN: 7.0.2-645, VA Agent: 7.0.2-364)

Hotfix 9 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-35779 Virtuozzo Automator warns about low disk space on SSDs with storage cache and journals. Vulnerability id: PVA-37393 VA agent can fully load MDS on nodes with lots of containers on Virtuozzo...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 8 (VA MN: 7.0.2-623, VA Agent: 7.0.2-341)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-37429 Need to return userbeancounters stats to VA agent. Vulnerability id: PVA-37434 Unable to reboot VE while changing its RAM/CPU live. Vulnerability id: PVA-37359, PVA-37415, PVA-37438 Other fixes...

NetSet - Operational Security Utility And Automator

Operational Security utility and automator. NetSet is designed to automate a number of operations that will help the user with securing their network traffic. It also provides an easy way to gather proxies and run utilities through Tor. All the utilities installed and used by NetSet will be...

Product update: Virtuozzo 7.0 Update 9 Hotfix 2 (7.0.9-547)

The Hotfix 2 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-91577 Migration of a container from a Virtuozzo 7 Update 8 host to a Virtuozzo 7 Update 9 host initiated from Virtuozzo Automator could lead to a crash of vzmigrate. Vulnerability id: PSBM-9186...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 7 (VA MN: 7.0.2-617, VA Agent: 7.0.2-329)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-36493, PVA-37325 Backups created with CLI were not listed in the web-based control panel. Vulnerability id: PVA-37287 Fixed behavior when alerts could be triggered before set limit was exceeded. Vulnerability...

TAU Threat Intelligence Notification: LamePyre (OSX)

Summary MalwareBytes researcher Adam Thomas recently discovered a malicious MacOS application masquerading as the chat app Discord that they have named “LamePyre." Although it is made to look like a typical application installer, it does not attempt to appear legitimate by running a decoy install...

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra This document describes the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. About Apple security updates For o...

Critical product update: Virtuozzo Automator 7.0 Update 2 Hotfix 6 (VA MN: 7.0.2-612, VA Agent: 7.0.2-326)

This hotfix for Virtuozzo Automator 7.0.2 provides security and stability fixes. Vulnerability id: CWE-79, PVA-37373 The software did not neutralize or incorrectly neutralized user-controllable input before it was placed in output that was used as a web page that was served to other users...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 5 (VA MN: 7.0.2-597, VA Agent: 7.0.2-320)

This hotfix for Virtuozzo Automator 7.0.2 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PVA-35645 Systemd reported the 'va-agent/va-mn' service as started before it had been initialized. Vulnerability id: PVA-37260 Scheduled backup of a large VM could fail...