159 matches found
SUSE SLES15 Security Update : python-azure-storage-queue (SUSE-SU-2023:4609-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4609-1 advisory. - CVE-2022-30187: Fixed information disclosure vulnerability bsc1202088. Tenable has extracted the preceding description block directly from...
Goblob - A Fast Enumeration Tool For Publicly Exposed Azure Storage Blobs
Goblob is a lightweight and fast enumeration tool designed to aid in the discovery of sensitive information exposed publicy in Azure blobs, which can be useful for various research purposes such as vulnerability assessments, penetration testing, and reconnaissance. Warning. Goblob will issue...
Apache NiFi Credentials Gather
This module will grab Apache NiFi credentials from various files on Linux. Module Options msf use post/linux/gather/apachenificredentials msf postapachenificredentials show actions ...actions... msf postapachenificredentials set ACTION msf postapachenificredentials show options ...show and set...
Citrix MCS failed when Azure storage account configured with TLS 1.2 Version.
Citrix MCS fails if the Azure storage account is configured with the TLS 1.2 version...
SUSE-SU-2023:2897-1 Security update for python-azure-core, python-azure-storage-blob
This update for python-azure-core, python-azure-storage-blob fixes the following issues: Security fixes: - CVE-2022-30187: Fixed information disclosure vulnerability bsc1202088. Recommended fixes: - New upstream release version 1.23.1 to SLE 15 bsc1199282, jscPM-3243, jscSLE-24629...
Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode
Carlos Canto contributed to this article. Rapid7 is very excited to announce version 0.6.9 of Velociraptor is now LIVE and available for download. Much of what went into this release was about expanding capabilities and improving workflows. We’ll now explore some of the interesting new features i...
Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability found in Json-smart library (CVE-2023-1370)
Summary IBM Workload Scheduler is potentially affected by a vulnerability found in Json-smart library that can cause a stack exhaustion stack overflow and software crash. Specifically, the following plugins can suffer from this issue: Azure Storage Job Executor, Azure Resource Manager Job Executo...
Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access
Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar with vario...
How to Configure Azure Storage Account to Leverage Immutability with Veeam Backup & Replication
Purpose This article was designed to complement the information available in the Veeam Backup & Replication User Guide, specifically the required storage account and container settings to align with the Azure Blob Storage Immutability Limitations. This article describes the correct options that...
The vulnerability of the Azure Storage Library, related to deficiencies in system-defined boundaries, allows attackers to gain unauthorized access to protected information.
The vulnerability of Azure Storage Library is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Azure Storage SDK でのクライアントサイド暗号化におけるパディング オラクル の脆弱性を軽減
本ブログは、Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability の抄訳版です。最新の情報は原文を参照してください。...
Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability
Summary: Google informed Microsoft under Coordinated Vulnerability Disclosure CVD of a padding oracle vulnerability that may affect customers using Azure Storage SDK for Python, .NET, Java client-side encryption CVE-2022-30187. To mitigate this vulnerability, we released a new General Availabilit...
Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability
Summary Summary Google informed Microsoft under Coordinated Vulnerability Disclosure CVD of a padding oracle vulnerability that may affect customers using Azure Storage SDK for Python, .NET, Java client-side encryption CVE-2022-30187. To mitigate this vulnerability, we released a new General...
CVE-2022-30187
creationtimestamp| type| source ---|---|--- 2022-07-13 02:25:48+00:00| seen| https://t.me/cibsecurity/46123 2022-07-18 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/07/mitigation-for-azure-storage-sdk-client-side-encryption-padding-oracle-vulnerability/...
Exposure of Resource to Wrong Sphere
Azure Storage Library Information Disclosure Vulnerability...
Exposure of Resource to Wrong Sphere
Azure Storage Library Information Disclosure Vulnerability...
CVE-2022-30187
Azure Storage Library Information Disclosure Vulnerability...
CVE-2022-30187
Azure Storage Library Information Disclosure Vulnerability...
