CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

CVE-2023-32997

The CVE-2023-32997 entry concerns the Jenkins CAS Plugin (versions 1.6.2 and earlier) that does not invalidate the existing session on login, enabling a session fixation risk. Multiple connected sources corroborate this behavior and describe it as allowing an attacker to potentially gain administ...

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

CVE-2023-32997: Session Fixation

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

PT-2023-24128 · Jenkins · Jenkins Cas Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins CAS Plugin versions 1.6.2 and earlier Description: The issue allows attackers to use social engineering techniques to gain administrator access to Jenkins because the previous session is not invalidated on login. Recommendations: For...

Session fixation vulnerability in cas-plugin

cas-plugin 1.6.2 and earlier does not invalidate the existing session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. cas-plugin 1.6.3 invalidates the existing session on login...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

Information disclosure

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-22447

CVE-2023-22447 affects Intel Open CAS software for Linux prior to version 22.6.2. The root cause is insertion of sensitive information into log files, enabling potential information disclosure with local access by a privileged user. Intel’s advisory confirms the affected product and provides a re...

PT-2023-18503

Name of the Vulnerable Software and Affected Versions Open CAS software for Linux maintained by Intel versions prior to 22.6.2 Description The issue allows a privileged user to potentially enable information disclosure via local access due to the insertion of sensitive information into a log file...

Intel Open CAS 日志信息泄露漏洞

Intel Open CAS is an open source project of Intel Intel, USA. It can accelerate I/O bound business applications. A security vulnerability exists in Intel Open CAS versions prior to 22.6.2 that originates from writing sensitive information to log files by default. An attacker could exploit this...

CVE-2023-22447: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to potentially enable information disclosure via local access...

Open CAS Advisory

Summary: A potential security vulnerability in the Open Cache Acceleration Software CAS for Linux maintained by Intel may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-22447 Description: Insertion...

CVE-2023-28725: Unrestricted Upload of File with Dangerous Type

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-28725

The General Bytes Crypto Application Server (CAS) version 20230120, distributed with BATM devices , contains a vulnerability (BATM-4780) that allows remote attackers to execute arbitrary Java code . The root cause is the unrestricted upload of Java applications to the /batm/app/admin/standalone/d...

K15623: GnuTLS vulnerability CVE-2009-5138

Security Advisory Description GnuTLS before 2.7.6, when the GNUTLSVERIFYALLOWX509V1CACRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new...