Moderate: Red Hat Security Advisory: Ansible security update (2.9.20)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Weak Password Vulnerability in Telecom Gateway Configuration Management Backend at China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation is a mega state-owned communications enterprise in China and a global partner of the Shanghai World Expo. A weak password vulnerability exists in the configuration management backend of China Telecom Group Corporation's telecom gateway,...

The vulnerability of the rsyslog configuration file in the Ansible configuration management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rsyslog configuration file in the Ansible configuration management system is related to incorrect default access settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations, related to the improper assignment of permissions for critical resources, allows attackers to gain access to confidential data.

The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that arises from improper authorization handling...

Nokia NetAct 18A Filename Change Code Execution Vulnerability

Nokia NetAct 18A is an application system from NOKIA, Finland. It provides best-in-class applications for seamless day-to-day network operations, including configuration management, monitoring and software management. A security vulnerability exists in Nokia NetAct 18A that allows an attacker to...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by an attacker to emulate foreman-proxy...

CVE-2021-21437

CVE-2021-21437 affects OTRSCIsInCustomerFrontend up to version 7.0.15 and ITSMConfigurationManagement up to 7.0.24. The issue allows agents to see linked Config Items without the required permissions, as defined in General Catalog. This is a data-access problem impacting confidentiality (partial)...

Unspecified Vulnerability in SaltStack Salt (CNVD-2021-15043)

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions prior to Salt 3002.5, which stems from the fact that eaut...

[SECURITY] Fedora 32 Update: ansible-2.9.18-1.fc32

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

[SECURITY] Fedora 33 Update: ansible-2.9.18-1.fc33

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.9.18)

An update for ansible is now available for Ansible Engine 2.9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

Foreman Security Vulnerabilities

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by a local attacker to expose passwords...

Weak Password Vulnerability in Transcoding Server Configuration Management System of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A weak password vulnerability exists in the configuration management system of the transcoding server of Zhejiang YUV Technology Co. Ltd, which can be exploited ...

OpenCSPM - Open Cloud Security Posture Management Engine

Open Cloud Security Posture Management, OpenCSPM, is an open-source platform for gaining deeper insight into your cloud configuration and metadata to help understand and reduce risk over time. Who is OpenCSPM for? Security teams running infrastructure in cloud environments looking to gain...

MOSE - Post Exploitation Tool For Configuration Management Servers.

MOSE is a post exploitation tool that enables security professionals with little or no experience with configuration management CM technologies to leverage them to compromise environments. CM tools, such as Puppet, Chef, Salt, and Ansible are used to provision systems in a uniform manner based on...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System of China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the Telecom Gateway Configuration Management System of China Telecom Group Corporatio...