Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM MessageGateway (CVE-2020-14803, CVE-2020-27221)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 8.0 used by IBM MessageGateway These issues were disclosed as part of the IBM Java SDK updates in January, 2021. Vulnerability Details CVEID: CVE-2020-14803 DESCRIPTION: An unspecified vulnerability in Java SE coul...

Security Bulletin: A security vulnerability in Node.js nodemailer module affects IBM Cloud Automation Manager.

Summary A security vulnerability in Node.js nodemailer module affects IBM Cloud Automation Manager. Vulnerability Details CVEID: CVE-2020-7769 DESCRIPTION: Nodejs could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation by the recipient email...

CVE-2020-36232

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...

Design/Logic Flaw

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...

CVE-2020-36232

The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it...

Jira atlassian-gadgets Code Issue Vulnerability

Jira atlassian-gadgets is an application plugin for the Jira community in the United States. It provides the ability to personalize the dashboard display by changing its color and changing other preferences to suit your needs. A security vulnerability exists in atlassian-gadgets, which originates...

EulerOS 2.0 SP2 : 389-ds-base (EulerOS-SA-2021-1280)

According to the version of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some...

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2021-1280)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability in Node.js y18n module affects IBM Cloud Pak for Multicloud Management.

Summary A security vulnerability in Node.js y18n module affects IBM Cloud Pak for Multicloud Management. Vulnerability Details CVEID: CVE-2020-7774 DESCRIPTION: Node.js y18n module could allow a remote attacker to execute arbitrary code on the system, caused by a prototype pollution flaw. By...

Security Bulletin: A vulnerability have been identified in FasterXML Jackson Databind shipped with IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library (CVE-2020-25649)

Summary FasterXML Jackson Databind is a dependency component shipped with the IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library for Message Bus Integration. Information about the security vulnerability affecting FasterXML Jackson Databind has been published. CVE-2020-25649...

Red Hat Ansible Information Disclosure Vulnerability

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and organize computer systems. An information disclosure vulnerability exists in Red Hat Ansible. The vulnerability allows bypassing data access restriction...

CVE-2020-12364

Null pointer reference in some IntelR Graphics Drivers for Microsoft Windows and the Linux kernel may allow a privileged user to potentially enable a denial of service via local access. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the R...

How to specify an Azure Active Directory tenant for Azure Cloud Credentials wizard to use

Challenge You are adding a Microsoft Azure account to Veeam Backup & Replication. You need to select the method of importing your Azure Resource Manager subscription, and you want to use an existing Azure Active Directory Account. Also, you have more than one Azure Active Directory tenant...

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

“Object reference not set to an instance of an object” error when initiating SharePoint restore

Challenge On a host with both Veeam Backup for Microsoft 365 and Veeam Backup & Replication installed, SharePoint restore initiated from Veeam Backup & Replication fails with "Object reference not set to an instance of an object" error. Cause This error occurs if the content type of a restored it...

How to configure registry settings for Microsoft Azure Data Box device

Reference Article This article is referenced by the Veeam Backup & Replication User Guide. Adding Azure Data Box Storage: Before You Begin Before you add Microsoft Azure Data Box to the Veeam Backup & Replication backup infrastructure, create the following registry key on Veeam Backup Server: Key...

2021-02 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5001028)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-02 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB5001028)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-02 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB5001028)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

2021-02 Dynamic Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5001028)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...