Storefront 3.12 CU5 Error: Propagation failed on one or more Servers

PROBLEM: When administrator launches Storefront Management Console and attempts to perform "Propagate Changes" on Servers , the process fails with the following error: Error: Propagation failed on one or more Servers Event logs on Primary Server shows the following event: Event ID 31 An error has...

CVE-2019-19587

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:1523-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-11472: Fixed a denial-of-service in ReadXWDImage bsc1133204. CVE-2019-11470: Fixed a denial-of-service in ReadCINImage bsc1133205. CVE-2019-11506: Fixed a heap-based buffer overflow in the WriteMATLABImage...

Developers Versus Automation Engineers: How We Ended the Fighting with the Right CI Process

Hey developers and DevOps professionals: what if I told you that how you wrap and execute your automation tests could be the key to making your development process faster, more professional and stable, and stop the bickering between your developers and automation teams? This post will describe ho...

PT-2019-5029 · Mchange +4 · C3P0 +4

Name of the Vulnerable Software and Affected Versions: c3p0 versions prior to 0.9.5.4 Description: The issue is related to errors in processing XML entities in the ConfigXmlUtils function of the c3p0 library for JDBC drivers. This can be exploited by a remote attacker to cause a denial of service...

PT-2019-5414 · Lighttpd +1 · Lighttpd +1

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.54 Description: The issue is related to a signed integer overflow in lighttpd, which could allow remote attackers to cause a denial of service application crash or possibly have other unspecified impacts via a...

SUSE-SU-2019:0387-1 Security update for build

This update for build version 20190128 fixes the following issues: Security issue fixed: - CVE-2017-14804: Improve file name check extractbuild bsc1069904 Non-security issue fixed: - Add initial SLE 15 SP1 config bsc1122895...

When propagating the changes from storefront server, getting Event ID 31.

" An error has occurred during the all server configuration update process. An error occurred running the command: 'Add-DSFeatureInstances' The element identified by the instruction 'addElement' at 6,4 with attribute 'xpath', value '/configuration/container/componenets', already exists At line:1...

Creditwest Bank CMS Project Cross-Site Request Forgery Vulnerability

The Creditwest Bank CMS Project aka CWCMS is a content management system CMS. A cross-site request forgery vulnerability exists in the Website Configuration Update feature in Creditwest Bank CMS Project 2017-07-28 and prior releases. A remote attacker can exploit this vulnerability to inject...

Error: "Propagation failed on one or more servers" when you attempt to propagate changes to StoreFront Server Group

Consider the following scenario. You have two or more StoreFront servers in the Server Group. When you attempt to propagatechanges to the StoreFront Server Group, it might fail with the error: "Propagation failed on one or more servers " as shown in the screenshot below: Additionally, following...

DRUPAL-CONTRIB-2017-091

The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration on your site differs from the configuration distributed by a module, theme, or installation profile, and to revert, delete, or import configuration. This...

Configuration Update Manager - Moderately critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2017-091

The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration on your site differs from the configuration distributed by a module, theme, or installation profile, and to revert, delete, or import configuration. This...

PT-2017-4238 · Apache +5 · Apache Tomcat +5

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 7.0.0 through 7.0.81 Apache Tomcat versions 8.0.0.RC1 through 8.0.46 Apache Tomcat versions 8.5.0 through 8.5.22 Apache Tomcat versions 9.0.0.M1 through 9.0.0 Description: The issue is related to the lack of restriction...

Propagation Fails with error "Failed to get the end status of the server configuration update."

"Failed to get the end status of the server configuration update." "Failure to notify of configuration update." "An erorr occurred running the command : 'Add-DSFeatureInstances'...

openSUSE: Security Advisory for kernel (openSUSE-SU-2016:1382-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2016-3682 · Pivotal +1 · Rabbitmq +1

Name of the Vulnerable Software and Affected Versions: tripleo-heat-templates versions 7.0 Description: The issue is related to the improper use of configured RabbitMQ credentials in the TripleO Heat templates, making it easier for remote attackers to obtain access to services in deployed...

Troubleshooting StoreFront propagation issues

StoreFront propagation fails to complete. The issue can manifest itself with any of the following errors: StoreFront Error: "Propagation Failed on One or More Servers" StoreFront Propagation Fails with Event ID: 31 "Could not find a part of the path" StoreFront Error: "Event ID 19 Failed to Get t...

Pimcore CMS Build 3450 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS CVE: CVE-2015-4425 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: It is possible for an...

Pimcore CMS Build 3450 - Directory Traversal

Pimcore CMS Build 3450 - Directory Traversal Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS CVE: CVE-2015-4425 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: It is possible for an...

Pimcore CMS Build 3450 Directory Traversal

Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS CVE: CVE-2015-4425 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: It is possible for an administrative user with the 'assets' permission to...