SUSE-SU-2018:0865-1 Security update for docker-distribution

This update for docker-distribution fixes the following issues: Security issues fixed: - CVE-2017-11468: Fixed a denial of service memory consumption via the manifest endpoint bsc1049850. Bug fixes: - bsc1083474: docker-distirbution-registry overwrites configuration file with update. - bsc1033172...

RADIUS Group Extraction Failing with Error "Extracted group : Null"

NetScaler unable to extract the group from the Radius server and we get the following response from the Radius server"Extracted group : Null" in aaad.debug log...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...

Clarifying the behavior of mandatory ASLR

Last week, the CERT/CC published an advisory describing some unexpected behavior they observed when enabling system-wide mandatory Address Space Layout Randomization ASLR using Windows Defender Exploit Guard WDEG and EMET on Windows 8 and above. In this blog post, we will explain the configuratio...

WEM Admin Console Error: "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again"

After performing in-place upgrade of the WEM Broker, The WEM Admin console gives the following error when trying to connect to the WEM site:. "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again" Plus, when opening t...

Error "Could not update master user list" while saving the LDAP Configuration on XenMobile server

Unable to save LDAP configuration and getting Error "Could not update master user list" For sample logs: 2017-08-21T09:21:30.411-0700 | 3811F15F6AE686BC | INFO | http-nio-14443-exec-11 | com.citrix.cg.identity.ldap.LdapManager | Given baseDN 'dc=domain,dc=example,dc=com'is valid:true...

App Layering PVS Agent error registering to ELM "Could not create SSL/TLS secure channel"

When configuring the App Layering Provisioning Services PVS Agent on the PVS server, the error"Could not create SSL/TLS secure channel" occurs...

GoCD: Spring security configuration allows agent sessions to be hijacked

Summary ======= If agents have successfully logged in, then unauthenticated requests to /go/agent-websocket or /go/remoting/ will randomly succeed sometimes. Description ======== The deprecated X509ProcessingFilter apparently does not work without a HttpSessionContextIntegrationFilter earlier on...

Error: "Stop error code 0x00000074 (BAD_SYSTEM_CONFIG_INFO)" When You Start VDI

The following error is displayed when you boot VDI: Stop error code 0x00000074 BADSYSTEMCONFIGINFO...

Xxe

An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser with improper restriction of XML external entity reference, or XXE may allow an attacker to enter malicious input through the...

OSPF is not advertising SDWAN routes to connected Router

OSPF configured on SDWAN 1K. OSPF is up between the MCN and next hop router. All of the virtual paths are up, but the MCN not advertising SDWAN routes into OSPF...

Trello: Phone verification code fails to expire and can be used multiple times also in different accounts to verify same cellphone number on Trello.com

Hi there Trello Security Team , I have noticed a certain behaviour at https://trello.com . What I belief to be a bug . Firstly , I would like to mention it is possible to use same cellphone number on multiple accounts without any problem , which I considere to be a security issue . I chose to...

Unable to Add/Upload an SSL Certificate/Key Pair to the CloudBridge: “Execution Error”

When configuring an SSL Profile the ssl certificate/key pair must be previously uploaded. The following error message is displayed when trying to upload the Certificate file extension .cer: Please correct any problems and resubmit your request Execution error...

Getting "Request not supported" while launching a published Desktop with FAS enabled

Launching of a published desktop fails when StoreFront server is configured to use FAS. You will get an error "Request Not Supported ". The below error may be seen in Kerberos event logs on the VDA when attempting to launch. 0x10 - KDCERRPADATATYPENOSUPP: KDC has no support for padata type Kerber...

Yelp: X.509 certificate validation fails on international vanity domains

This is not an vulnerability, more likely TLS/SSL related configuration issue with certificates noticed during bug bounty testing. If you try to access any Finnish domain such as my HackerOne test-profile http://tomitest.yelp.fi/, there will be an certificate related error presented to user. You...

Error: "Failed, curl response = Couldn't connect to server. Could not connect to database"

After rebooting the XenMobile Server or configuring database, we see the error on CLI: "Failed, curl response = couldn't connect to server. Could not connect to database"...

Cisco Adaptive Security Appliance ICMP Echo Request ACL Bypass (cisco-sa-20160711-asa)

According to its version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is version 8.2.x or 9.4.x prior to 9.43.3, 9.5.x prior to 9.52.10, or 9.6.x prior to 9.61.5. It is, therefore, affected by an ACL bypass vulnerability due to a flaw in the...

Ian Dunn: [Not just a server configuration issue] Full Path Disclosure

Hey, I've just found a 'full path disclosure' in basic-google-maps-placemarks, so it's not just a server configuration issue! I've tested it on different servers including windows, ubuntu, CentOS etc.. PoC So, if we visit wp-content/plugins/basic-google-maps-placemarks/unit-tests.php it is clearl...

XenApp 6.5 - Unable to install the hotfix

XenApp 6.5 - Unable to install the hotfix installation fails because CDFSVC fails to start If you compare a working and non-working machine you'll see some registry keys missing for cdfsvc If you search theAppID, you might not find it on the problematic machine HKCR in dcomcnfg you will not be ab...

IBM Lotus Domino R8 - Password Hash Extraction Exploit

Exploit for windows platform in category web applications Exploit Title: IBM Lotus Domino = R8 Password Hash Extraction Exploit Google Dork: inurl:names.nsf?opendatabase Date: 02-24-2016 Exploit Author: Jonathan Broche Contact: https://twitter.com/g0jhonny Vendor Homepage:...