EUVD-2019-1501

Malware in sbrugna...

CVE-2019-0729: Use of Insufficiently Random Values

An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'...

CVE-2019-0741: Insertion of Sensitive Information into Log File

An information disclosure vulnerability exists in the way Azure IoT Java SDK logs sensitive information, aka 'Azure IoT Java SDK Information Disclosure Vulnerability'...

PT-2019-11250

Name of the Vulnerable Software and Affected Versions: Azure IoT Java SDK affected versions not specified Description: An issue exists in the Azure IoT Java SDK related to the generation of symmetric keys for encryption. This allows an attacker to predict the randomness of the key. Recommendation...

PT-2019-11251

Name of the Vulnerable Software and Affected Versions: Azure IoT Java SDK affected versions not specified Description: An information disclosure issue exists due to the way the Azure IoT Java SDK handles logging of sensitive information. Recommendations: At the moment, there is no information abo...

KLA11419 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A...