Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode

Carlos Canto contributed to this article. Rapid7 is very excited to announce version 0.6.9 of Velociraptor is now LIVE and available for download. Much of what went into this release was about expanding capabilities and improving workflows. We’ll now explore some of the interesting new features i...

Security Bulletin: IBM Workload Scheduler potentially affected by a vulnerability found in Json-smart library (CVE-2023-1370)

Summary IBM Workload Scheduler is potentially affected by a vulnerability found in Json-smart library that can cause a stack exhaustion stack overflow and software crash. Specifically, the following plugins can suffer from this issue: Azure Storage Job Executor, Azure Resource Manager Job Executo...

Best practices regarding Azure Storage Keys, Azure Functions, and Azure Role Based Access

Summary Azure provides developers and security operations staff a wide array of configurable security options to meet organizational needs. Throughout the software development lifecycle, it is important for customers to understand the shared responsibility model, as well as be familiar with vario...

How to Configure Azure Storage Account to Leverage Immutability with Veeam Backup & Replication

Purpose This article was designed to complement the information available in the Veeam Backup & Replication User Guide, specifically the required storage account and container settings to align with the Azure Blob Storage Immutability Limitations. This article describes the correct options that...

The vulnerability of the Azure Storage Library, related to deficiencies in system-defined boundaries, allows attackers to gain unauthorized access to protected information.

The vulnerability of Azure Storage Library is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Azure Storage SDK でのクライアントサイド暗号化におけるパディング オラクル の脆弱性を軽減

本ブログは、Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability の抄訳版です。最新の情報は原文を参照してください。...

Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability

Summary: Google informed Microsoft under Coordinated Vulnerability Disclosure CVD of a padding oracle vulnerability that may affect customers using Azure Storage SDK for Python, .NET, Java client-side encryption CVE-2022-30187. To mitigate this vulnerability, we released a new General Availabilit...

Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability

Summary Summary Google informed Microsoft under Coordinated Vulnerability Disclosure CVD of a padding oracle vulnerability that may affect customers using Azure Storage SDK for Python, .NET, Java client-side encryption CVE-2022-30187. To mitigate this vulnerability, we released a new General...

CVE-2022-30187

creationtimestamp| type| source ---|---|--- 2022-07-13 02:25:48+00:00| seen| https://t.me/cibsecurity/46123 2022-07-18 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/07/mitigation-for-azure-storage-sdk-client-side-encryption-padding-oracle-vulnerability/...

com.azure.spring:azure-spring-boot-starter-storage (>=3.1.0 <=3.14.0), com.azure.spring:azure-spring-cloud-starter-eventhubs (>=2.2.0 <=2.14.0) +144 more potentially affected by CVE-2022-30187 via com.azure:azure-storage-blob (>=12.0.0-preview.1 <=12.18.0-beta.1)

com.azure:azure-storage-blob MAVEN version =12.0.0-preview.1, =3.1.0, =2.2.0, =2.2.0, =2.2.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =1.0.0-preview.1, =12.0.0, =12.0.0-beta.5, =12.0.0-beta.18 and more Source cves: CVE-2022-30187 S...

amplo (>=0.9.0 <=0.10.1), apache-airflow-backport-providers-microsoft-azure (>=2020.5.20rc1 <=2020.11.23rc1) +49 more potentially affected by CVE-2022-30187 via azure-storage-blob (>=0.37.0 <=12.12.0)

azure-storage-blob PYPI version =0.37.0, =0.9.0, =2020.5.20rc1, =1.0.0b1, =1.0.0b1, =0.21.2111.177147b1, =0.2.7, =1.0.72.1, =1.37.0, =0.0.1, =1.0.0, =0.3.8, =0.6.3, =0.16.0, =0.21.1rc2 and more Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

acido (>=0.16.0 <=0.53.0), adx-logging-handler (>=1.0.0 <=1.0.3) +107 more potentially affected by CVE-2022-30187 via azure-storage-queue (>=0.37.0 <=12.3.0)

azure-storage-queue PYPI version =0.37.0, =0.16.0, =1.0.0, =2.13.1.post2, =0.2.0, =2.3.1, =0.1.0, =1.2.0, =0.1.0, =1.0.0, =0.1.5, =0.1.0, =0.5.10, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

Exposure of Resource to Wrong Sphere

Azure Storage Library Information Disclosure Vulnerability...

Exposure of Resource to Wrong Sphere

Azure Storage Library Information Disclosure Vulnerability...

CVE-2022-30187

Azure Storage Library Information Disclosure Vulnerability...

CVE-2022-30187

Azure Storage Library Information Disclosure Vulnerability...

Information disclosure

Azure Storage Library Information Disclosure Vulnerability...

CVE-2022-30187

Azure Storage Library Information Disclosure Vulnerability...

CVE-2022-30187 Azure Storage Library Information Disclosure Vulnerability

...

CVE-2022-30187 Azure Storage Library Information Disclosure Vulnerability

...