84 matches found
CVE-2022-1003
One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads...
PT-2022-13584
Name of the Vulnerable Software and Affected Versions Mattermost versions 6.3.0 and earlier Description The issue concerns a problem with an API in Mattermost where system administrators can combine two distinct privileges to override certain restricted configurations, such as EnableUploads...
CVE-2022-22811
A CWE-352: Cross-Site Request Forgery CSRF vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX...
CVE-2022-22811
A CWE-352: Cross-Site Request Forgery CSRF vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX...
CVE-2022-22811: Cross-Site Request Forgery (CSRF)
A CWE-352: Cross-Site Request Forgery CSRF vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX...
Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration
...
SUSE-SU-2021:3611-1 Security update for systemd
This update for systemd fixes the following issues: - machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 - Add timestamp to D-Bus events to improve traceability. jscSLE-21894 - busctl: add a timestamp to the output of the busctl monitor command bsc1180225, jscSLE-21894 -...
Better Real User Monitoring with BoomerangJS and Akamai mPulse
In this blog, we'll walk through a few different snippet insertion methods and available optimizations. Akamai's real user monitoring RUM solution, mPulse, uses a bit of JavaScript code an mPulse snippet and the BoomerangJS library to collect performance data from a user's Web browser. However, t...
PT-2021-27334
Name of the Vulnerable Software and Affected Versions: freeradius-server affected versions not specified Description: The issue concerns the handling of logrotate options in the freeradius-server configuration. Specifically, 'global' options will persist and override global options in the main...
PT-2021-28413
Name of the Vulnerable Software and Affected Versions: freeradius-server affected versions not specified Description: The issue concerns the handling of logrotate options in the freeradius-server configuration. Specifically, 'global' options will persist and override global options in the main...
GHSA-C3M8-X3CG-QM2C Configuration Override in helmet-csp
Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an application'...
Configuration Override in helmet-csp
Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an application'...
IBM Planning Analytics Code Execution Vulnerability
IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics versions 2.0.0 through 2.0.8. An attacke...
Configuration Override
Overview Versions of helmet-csp before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy CSP. The package's browser sniffing for Firefox deletes the default-src CSP policy, which is the fallback policy. This allows an attacker to remove an...
CVE-2018-0503
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'...
PT-2018-15211
Name of the Vulnerable Software and Affected Versions Jenkins Agiletestware Pangolin Connector for TestRail Plugin versions 2.1 and earlier Description A data modification issue exists that allows attackers with Overall/Read permission to override the plugin's configuration by sending crafted HTT...
Moderate: Red Hat Bug Fix Advisory: Red Hat OpenStack Platform 9 director Bug Fix Advisory
Updated packages that resolve various issues are now available for Red Hat OpenStack Platform 9.0 director for RHEL 7. Red Hat OpenStack Platform director provides the facilities for deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud based on Red Hat OpenStack...
CVE-2015-9243: Improper Access Control
When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions like origin, a higher level config that included security restrictions like origin would have those restrictions...
CVE-2017-12170
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...
CVE-2017-12170
Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...