Low: Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

Ansible discloses sensitive information in traceback error message

Ansible is an IT automation system that handles configuration management, application deployment, cloud provisioning, ad-hoc task execution, network automation, and multi-node orchestration. A flaw was found in Ansible Engine's ansible-connection module where sensitive information, such as the...

Puppet 输入验证错误漏洞

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, and more. A security vulnerability exists in the Puppet Firewall Module, which stems...

Meet FedRAMP Compliance with Qualys Cloud Platform

FedRAMP compliance is not without its challenges. Learn about some of the major security controls and how the Qualys Cloud Platform can help achieve FedRAMP authorization. What is FedRAMP? The Federal Risk and Authorization Management Program FedRAMP is a U.S. government program that promotes the...

The vulnerability of the snapper module in the configuration management system and remote execution of SaltStack Salt allows a perpetrator to gain increased privileges.

The vulnerability of the snapper module in the Configuration Management system and the remote execution of SaltStack Salt is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges through a special...

Mageia: Security Advisory (MGASA-2014-0084)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: Satellite 6.10.2 Async Bug Fix Update

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

The vulnerability of the Ansible configuration management system arises from improper processing of output data for registration logs, allowing an attacker to access confidential information.

The vulnerability of the Ansible configuration management system is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the write_data method in the Ansible configuration management system lies in the use of insecure temporary files, allowing attackers to access confidential data.

The vulnerability of the writedata method in the Ansible configuration management system is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential data...

The vulnerability of the Ansible configuration management system, related to the use of insufficiently random values, allows a attacker to gain access to confidential data.

The vulnerability of the Ansible configuration management system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data.

The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the Ansible configuration management system, related to insecure temporary files, allows a hacker to access confidential data.

The vulnerability of the Ansible configuration management system is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential data...

Security Bulletin: A Remote Attack Vulnerability in Apache Log4j affects Engineering Lifecycle Management and IBM Engineering products

Summary There is a high risk Remote Attack Vulnerability in Apache Log4j CVE-2021-44228 which is used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Workflow Management EWM, IBM Engineering Systems...

Security Bulletin: WebSphere Application Server is vulnerable to a denial of service which can impact IBM Engineering Lifecycle Management (ELM) products based on IBM Jazz technology

Summary WebSphere Application Server is vulnerable to a denial of service CVE-2021-38951. This may affect IBM Engineering Products based on IBM Jazz technology. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

The vulnerability of the configuration management system and remote execution capabilities of SaltStack Salt allows attackers to execute arbitrary commands by exploiting errors in the authentication processing for expired eauth tokens.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to errors in processing authentication requests for expired eauth tokens. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to temporarily increase their privileges locally.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to the check for rebooting minions. Exploiting this vulnerability could allow an attacker who has the ability to create files in the directory to locally escalate their...

The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to execute arbitrary commands with elevated privileges.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to errors in the processing of input data in the ssh-client salt-api. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated...

The vulnerability of the `salt.utils.thin.gen_thin()` function in the configuration management system and remote execution of SaltStack Salt operations allows a attacker to execute arbitrary commands on the target system.

The vulnerability of the salt.utils.thin.genthin function in the configuration management system and for remote execution of SaltStack Salt is related to insufficient validation of arguments passed in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

The vulnerability of the configuration management system and remote execution capabilities of SaltStack Salt, related to improper access restrictions, allows a perpetrator to gain unauthorized access to other restricted functions.

The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to improper access restrictions. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to other restricted functions...