306 matches found
Logic flaw vulnerability in cms system of Wave Group Ltd.
i.e. Wave Group, which owns four listed companies, namely Wave Information, Wave Software, Wave International and Huaguang Optoelectronics, with business covering four industry clusters, namely cloud data center, cloud service big data, smart city and smart enterprise, provides IT products and...
Carbon Black Awarded 5-Star Rating in CRN’s 2019 Partner Program Guide for the Third Consecutive Year
We are proud to announce that CRN®, a brand of The Channel Company, has given Carbon Black a 5-Star rating in its 2019 Partner Program Guide for the third consecutive year! According to CRN, this annual guide identifies the strongest and most successful partner programs in the channel today,...
Carbon Black and Chronicle: Stronger Cybersecurity through Big Data and Analytics
This is another exciting day for cybersecurity professionals, for Carbon Black and for me personally. It’s also a very exciting way to kick of RSA 2019! Earlier today, we announced an exciting new integration with Chronicle Security to harness the power of big data and analytics. Our goal is to...
AWS Helping to Unlock Potentially Life-saving Innovation for the Healthcare Sector – While Keeping Sensitive Information Locked Down
Marnie Wilking – CISO, VP Information Assurance, Orion Health Many of the next significant, potentially lifesaving discoveries that will happen in healthcare will be the direct result of big data, machine learning and artificial intelligence. Making the shift to big data, machine learning and...
Debunking AI’s Impact on the Cybersecurity Skills Gap
Artificial intelligence is the latest buzzword to take hold of the cybersecurity industry. It is being touted, among other things, as the ultimate solution to the cybersecurity skills gap. But just how accurate is this belief? Will AI be the cure to all of our cybersecurity ailments, as human...
Explained: What is big data?
If the pile of manure is big enough, you will find a gold coin in it eventually. This saying is used often to explain why anyone would use big data. Needless to say, in this day and age, the piles of data are so big, you might end up finding a pirate’s treasure. How big is the pile? But when is t...
Security Bulletin: IBM Spectrum Scale (GPFS) Hadoop connector is affected by a security vulnerability (CVE-2015-7430)
Summary A security vulnerability has been identified in the IBM Spectrum Scale GPFS Hadoop connector which could allow an unprivileged user the ability to read, write, modify, or delete any data in a GPFS file system CVE-2015-7430 Vulnerability Details CVEID: CVE-2015-7430 DESCRIPTION: IBM Genera...
Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Using Components with Known Vulnerabilities vulnerability
Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2016-7103 DESCRIPTION: jQuery UI is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the dialog function. A remote...
Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Incorrect Permission Assignment for Critical Resource vulnerability
Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1370 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG specifies permissions for a security-critical resource in a way that allows that resourc...
Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is affected by an Invalid Account Lockout vulnerability (CVE-2018-1373)
Summary IBM Security Guardium Big Data Intelligence SonarG has addressed the following vulnerability Vulnerability Details CVEID: CVE-2018-1373 DESCRIPTION: IBM Security Guardium Big Data Intelligence SonarG uses an inadequate account lockout setting that could allow a remote attacker to brute...
Grid Pro Big Data 1.0 - SQL Injection
Grid Pro Big Data 1.0 - SQL Injection Exploit Title: Grid Pro Big Data 1.0 - 'test.php' SQL Injection Dork: N/A Date: 30.05.2018 Exploit Author: Kağan Çapar Vendor Homepage:...
Grid Pro Big Data 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Grid Pro Big Data 1.0 - 'test.php' SQL Injection Exploit Author: Kağan Çapar Vendor Homepage: https://codecanyon.net/item/grid-pro-big-data-table-view-data-grid-with-sort-search-and-filter-for-large-mysql-tables/20395348 Version...
IBM Security Guardium Big Data Intelligence Information Disclosure Vulnerability (CNVD-2018-10706)
IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...
IBM Security Guardium Big Data Intelligence Session ID Not Updated Vulnerability
IBM Security Guardium Big Data Intelligence is a solution that delivers the capabilities of a big data platform while meeting data security requirements. IBM Security Guardium Big Data Intelligence SonarG suffers from a session identifier not updated vulnerability. The vulnerability arises becaus...
IBM Security Guardium Big Data Intelligence Cross-Site Scripting Vulnerability
IBM Security Guardium Big Data Intelligence is a solution that delivers the capabilities of a big data platform while meeting data security requirements. A cross-site scripting vulnerability exists in IBM Security Guardium Big Data Intelligence SonarG. The vulnerability can be exploited by a user...
CVE-2018-1369
IBM Security Guardium Big Data Intelligence SonarG 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 137767...
CVE-2018-1376
IBM Security Guardium Big Data Intelligence SonarG 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
Design/Logic Flaw
IBM Security Guardium Big Data Intelligence SonarG 3.1 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 136471...
CVE-2018-1370
IBM Security Guardium Big Data Intelligence SonarG 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 137769...