CVE-2024-41773

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773

CVE-2024-41773 affects IBM Global Configuration Management (GCM) versions 7.0.2 and 7.0.3. The root cause is improper access controls that could allow an authenticated user to archive a global baseline. Public sources in the connected documents corroborate this description and assign a CVSS base ...

Security Bulletin: IBM Global Configuration Management - Vulnerable to archiving a global baseline by an authenticated user having improper access controls

Summary IBM Global Configuration Management is vulnerable to archiving a global baseline by an authenticated user having improper access controls/permissions. This bulletin contains information regarding the vulnerability and remediation actions. Vulnerability Details CVEID:CVE-2024-41773...

CVE-2024-43397

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...

CVE-2024-43397 Potential unauthorized access issue in apollo-portal

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...

CVE-2024-43397

CVE-2024-43397 affects Apollo’s synchronization configuration feature in the open-source Apollo configuration management system. The vulnerability allows an attacker to bypass permission checks via crafted requests, enabling modification of a namespace without the required rights. The root cause ...

CVE-2024-43397 Potential unauthorized access issue in apollo-portal

Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that allows users to craft specific requests to bypass permission checks. This exploit enables them to modify a namespace without the necessary permissions. The issue was addressed wit...

Apollo 安全漏洞

Apollo is an Apollo open source configuration management system. A security vulnerability exists in Apollo version 2.3.0, which stems from a privilege check bypass issue in the Synchronized Configuration feature...

IBM Global Configuration Management 安全漏洞

IBM Global Configuration Management is a Web-based tool from International Business Machines IBM. It can be used to assemble configurations from other IBM Engineering Lifecycle Management ELM applications into a global configuration. An Access Control Error vulnerability exists in IBM Global...

PT-2024-29557 · Ibm · Ibm Global Configuration Management

Name of the Vulnerable Software and Affected Versions: IBM Global Configuration Management versions 7.0.2 through 7.0.3 Description: The issue is related to improper access controls, allowing an authenticated user to archive a global baseline. This could potentially lead to privilege escalation d...

GHSA-HW28-333W-QXP3 Harbor fails to validate the user permissions when updating project configurations

Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...

Harbor fails to validate the user permissions when updating project configurations

Impact Harbor fails to validate the maintainer role permissions when creating/updating/deleting project configurations - API call: - PUT /projects/projectnameorid/metadatas/metaname - POST /projects/projectnameorid/metadatas/metaname - DELETE /projects/projectnameorid/metadatas/metaname By sendin...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.15.2 Async Update

Updated Satellite 6.15 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

The vulnerability of configuration management systems and remote execution of operations, related to the creation of special URL addresses, allows attackers to gain access to confidential information.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the creation of URLs that lead to bypassing the server’s catalog. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the configuration management system and the remote execution of operations, known as Salt, is related to the possibility of bypassing the catalog. This allows attackers to execute arbitrary code.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the possibility of bypassing the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ROS-20240625-05

A vulnerability in Salt's configuration management and remote execution system is related to the catalog traversal. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code A vulnerability in the Salt configuration management and remote Salt operations...

USN-6846-1: Ansible vulnerabilities

It was discovered that Ansible incorrectly handled certain inputs when using towercallback parameter. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. This issue only affecte...