975 matches found
[SECURITY] Fedora 22 Update: ansible-2.0.2.0-1.fc22
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 23 Update: ansible1.9-1.9.6-1.fc23
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
[SECURITY] Fedora 22 Update: ansible1.9-1.9.6-1.fc22
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
ManageEngine Network Configuration Management Elevation of Privilege Vulnerability
Network Configuration Manager is a Network Change, Configuration and Compliance Management NCCM solution. An elevation of privilege vulnerability exists in ManageEngine Network Configuration Management, which allows an attacker to exploit the vulnerability to elevate privileges to become an...
ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities
Exploit for windows platform in category web applications ================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type :...
ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities
ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities ================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type :...
ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities
================================================================ ManageEngine Firewall Analyzer 8.5– Privilege Escalation Vulnerability ================================================================ Description : Vulnerability Type : Privilege Escalation Vulnerability Vulnerable Version : 8.5...
CVE-2015-5970
The ChangePassword RPC method in Novell ZENworks Configuration Management ZCM 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference...
CVE-2015-5970
The ChangePassword RPC method in Novell ZENworks Configuration Management ZCM 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and read arbitrary text files, via a malformed query involving a system entity reference...
CVE-2015-5970
Novell ZENworks Configuration Management (ZCM) versions 11.3 and 11.4 are affected by an information-disclosure vulnerability in the ChangePassword RPC. The root cause is XPath injection triggered by malformed queries that reference a system entity, allowing an unauthenticated, remote attacker to...
ManageEngine Network Configuration Management Build 11000 - Privilege Escalation
=================================================================================== Privilege escalation Vulnerability in ManageEngine Network Configuration Management =================================================================================== Overview ======== Title:- Privilege escalatio...
Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery
Exploit for multiple platform in category web applications ========================================================================================= Cross-Site Request Forgery Vulnerability in ManageEngine Network Configuration Management...
ManageEngine Network Configuration Management Build 11000 CSRF
Title:- Cross-Site Request Forgery CSRF Vulnerability in ManageEngine Network Configuration Management Author: Kaustubh G. Padwad Vendor: ZOHO Corp Product: ManageEngine Network Configuration Manager Tested Version: : Network Configuration Manager Build 11000 Severity: HIGH About the Product:...
The vulnerability of clients to universal configuration management databases like USMDB Browser allows attackers to obtain confidential information or circumvent existing access restrictions.
The vulnerability of the client for universal configuration management databases of the USMDB Browser is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating locally, to obtain confidential information or circumvent existing access restrictions...
Moderate: Red Hat Security Advisory: Satellite 6.1.5 bug fix update
Updated Satellite 6.1 packages that fix one security issue, add one enhancement, and fix several bugs are available for Satellite 6.1.5. Red Hat Product Security has rated this update as having Moderate Security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...
Password expiration vulnerability in multiple IBM products
IBM Maximo Asset Management is a product of IBM Corporation.Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.SmartCloud Control Desk SCCD is a unified asset and service management software.Tivoli IT Asset...
JVN#21968837: ManageEngine Firewall Analyzer vulnerable to directory traversal
ManageEngine Firewall Analyzer provided by Zoho Corporation is a log analytics and configuration management software for network security devices. ManageEngine Firewall Analyzer contains a directory traversal vulnerability. Impact An authenticated attacker may be able to obtain arbitrary files on...
JVN#12991684: ManageEngine Firewall Analyzer fails to restrict access permissions
ManageEngine Firewall Analyzer provided by Zoho Corporation is a log analytics and configuration management software for network security devices. ManageEngine Firewall Analyzer contains a vulnerability where access permissions are not restricted. Impact An attacker may be able to obtain server...
Department of Education Lambasted Over Database Vulnerabilities
Like the Office of Personnel Management before it, the Department of Education has failed to heed repeated warnings that its systems contain multiple weaknesses. In a House Committee on Oversight and Government Reform hearing held this week, Congressman and committee chair Jason Chaffetz R-Utah...