CVE-2023-36415 Azure Identity SDK Remote Code Execution Vulnerability

...

Azure Identity SDK Remote Code Execution Vulnerability

...

Azure Identity SDK Remote Code Execution Vulnerability

...

PT-2023-25570 · Microsoft · Azure Identity Sdk

Name of the Vulnerable Software and Affected Versions: Azure Identity SDK affected versions not specified Description: The issue concerns a remote code execution vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Azure Identity SDK Remote Code Execution Vulnerability...

Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Microsoft Azure SDK. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:...

PT-2023-25569 · Microsoft · Azure Identity Sdk

Name of the Vulnerable Software and Affected Versions: Azure Identity SDK affected versions not specified Description: The Azure Identity SDK is vulnerable to remote code execution. There is no information provided about the estimated number of potentially affected devices worldwide or details...

fence-agents security and bug fix update

4.10.0-43 - fencevmwaresoap: set logintimeout lower than default pcmkmonitortimeout 20s to remove tmp dirs Resolves: rhbz2122944 4.10.0-42 - fencing/fencewti: add --plug-separator to be able to avoid characters that are in node names Resolves: rhbz2152107 4.10.0-41 - fencescsi: skip key generatio...

Malicious code in azure-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2de66df6e15dc4eef5b9a49c02ff8237d94e47c5043c8b6690b8373b77f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ai.h2o:h2o-clustering (>=3.32.1.1 <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2 <=3.44.0.2) +212 more potentially affected by CVE-2022-21230 via org.nanohttpd:nanohttpd (>=2.2.0 <=2.3.1)

org.nanohttpd:nanohttpd MAVEN version =2.2.0, =3.32.1.1, =3.30.0.2, =3.34.0.3, =1.0.0, =1.0.0, =1.0.0, =3.8, =1.0, =1.1, =0.2.22, =0.2.22, =0.4.15 and more Source cves: CVE-2022-21230 Source advisory: SNYK:JAVA-ORGNANOHTTPD-2422798...

List of Security Fixes and Improvements in Veeam Backup & Replication

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup & Replication. The goal of this article is to provide our customers' security and compliance teams with detailed information on security improvements between releases, i...

Cybersecurity threats: How to discover, remediate, and mitigate

This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog, Protect...