Malicious code in bosh_plugin-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bosh_plugin-generator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6789 Malicious code in bosh-lastpass_plugin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bosh-lastpass_plugin (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bosh-cli_plugin_consul (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bosh-cli_plugin_redis (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6787 Malicious code in bosh-cli_plugin_consul (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6788 Malicious code in bosh-cli_plugin_redis (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:11372-1 bosh-2021.09.01-44.2 on GA media

These are all security issues fixed in the bosh-2021.09.01-44.2 package on the GA media of openSUSE Tumbleweed...

Security Update for Microsoft Visual Studio Code Bosh Editor Extension (CVE-2022-31691)

The Microsoft Visual Studio Code Bosh Editor Extension is version 1.39.0 or below. It is, therefore, affected by a remote code execution vulnerability. The extension uses the Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain...

SUSE CVE-2020-5422

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE Report Published for Spring Tools

We have released STS 4.16.1 for Eclipse and Spring VSCode extensions 1.40.0 to address the following CVE report: - CVE-2022-31691: Remote Code Execution via YAML editors in STS4 extensions for Eclipse and VSCode Please review the information in the CVE report and upgrade immediately. Eclipse: STS...

PT-2022-20891 · Spring · Spring Boot Tools +1

Name of the Vulnerable Software and Affected Versions: Spring Tools 4 for Eclipse version 4.16.0 and below Spring Boot Tools version 1.39.0 and below Concourse CI Pipeline Editor version 1.39.0 and below Bosh Editor version 1.39.0 and below Cloudfoundry Manifest YML Support version 1.39.0 and bel...

Remote Code Execution via YAML editors in STS4 extensions for Eclipse and VSCode

Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some...

USN-4628-2: Intel Microcode regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Description USN-4628-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Tiger Lake family from booting successfully. This update...

CVE-2020-5422

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

Default credentials

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422 UAA password may appear in BOSH System Metrics Server process arguments

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422

CVE-2020-5422 : BOSH System Metrics Server releases prior to 0.1.0 expose the UAA password as a flag in a process argument on the BOSH director, making the password readable by any user/process on the same VM (e.g., via ps or examining process details). Affected product: BOSH System Metrics Serve...