PT-2023-24128 · Jenkins · Jenkins Cas Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CAS Plugin versions 1.6.2 and earlier Description: The issue allows attackers to use social engineering techniques to gain administrator access to Jenkins because the previous session is not invalidated on login. Recommendations: For...

Session fixation vulnerability in cas-plugin

cas-plugin 1.6.2 and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. cas-plugin 1.6.3 invalidates the existing session on login...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

CVE-2023-22447 affects Intel Open CAS software for Linux prior to version 22.6.2. The root cause is insertion of sensitive information into log files, enabling potential information disclosure with local access by a privileged user. Intel’s advisory confirms the affected product and provides a re...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

Intel Open CAS log information leakage vulnerability

Intel Open CAS is an open source project of Intel Intel, USA. It can accelerate I/O bound business applications. A security vulnerability exists in Intel Open CAS versions prior to 22.6.2 that originates from writing sensitive information to log files by default. An attacker could exploit this...

CVE-2023-22447: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-18503

Name of the Vulnerable Software and Affected Versions Open CAS software for Linux maintained by Intel versions prior to 22.6.2 Description The issue allows a privileged user to potentially enable information disclosure via local access due to the insertion of sensitive information into a log file...

Open CAS Advisory

Summary: A potential security vulnerability in the Open Cache Acceleration Software CAS for Linux maintained by Intel may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-22447 Description: Insertion...

org.apereo.cas:cas-server-core-configuration-cloud-vault (5.2.0-rc1) potentially affected by CVE-2023-20859 via org.springframework.vault:spring-vault-core (1.0.1.release)

org.springframework.vault:spring-vault-core MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.vault:spring-vault-core and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-vault 5.2.0-rc...

CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-dependencies-server-min (4.1.0.final) +3 more potentially affected by CVE-2023-0264 via org.keycloak:keycloak-services (4.1.0.final)

org.keycloak:keycloak-services MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2023-0264 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...