CVE-2025-24508

Extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage...

CVE-2025-24508 Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

Extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage...

CVE-2025-24508 Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

Extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage...

CVE-2025-24508

CVE-2025-24508 affects Broadcom Symantec IT Management Suite via the IT Management Agent secure storage, enabling extraction of Account Connectivity Credentials (ACCs). Root cause described as improper protection/failure to securely restrict access to ACCs in storage, enabling local theft when at...

PT-2025-28127 · Broadcom · Symantec It Management Suite

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns the extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage. Recommendations: At the moment, there is no information about a newer...

CVE-2025-24508: Insufficiently Protected Credentials

Extraction of Account Connectivity Credentials ACCs from the IT Management Agent secure storage...

SUSE CVE-2025-25207

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with...

July 1, 2025—KB5063774 (OS Build 25398.1668) Out-of-band

None None...

DataEase 安全漏洞

DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. DataEase version 2.10.11 before the existence of a security vulnerability , the...

Red Hat Connectivity Link Resource Management Error Vulnerability

Red Hat Connectivity Link is a Kubernetes network connectivity management platform from Red Hat, USA. Red Hat Connectivity Link suffers from a Resource Management Error vulnerability that stems from uncontrolled resource consumption by an application, which can be exploited by an attacker to caus...

Red Hat Connectivity Link Information Disclosure Vulnerability

Red Hat Connectivity Link is a Kubernetes network connectivity management platform from Red Hat, USA. Red Hat Connectivity Link suffers from an information disclosure vulnerability that stems from improper key storage, which can be exploited by an attacker to cause information disclosure...

Red Hat Connectivity Link Resource Management Error Vulnerability

Red Hat Connectivity Link is a Kubernetes network connectivity management platform from Red Hat, USA. Red Hat Connectivity Link has a resource management error vulnerability that can be exploited by an attacker to cause the Authorino service to crash...

Centre Driven Controlled Evolution of Wireless Virtual Networks Based on Broadcast Tokens

In a wireless sensor network, the virtual connectivity between nodes is a function of the keys shared between various nodes. Pre-embedding these key configurations in the nodes would make the network inflexible. On the other hand, permitting subsets of nodes to engage in a common key synthesis...

Moderate: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EUVD-2025-18566

Teleport allows remote authentication bypass...

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, enables attackers to execute “man-in-the-middle” attacks.

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to deficiencies in the authentication process. Exploiting this vulnerability could enable a malicious actor to carry out a “man-in-the-middle” attack...

[SECURITY] Fedora 42 Update: qt6-qtconnectivity-6.9.1-1.fc42

Qt6 - Connectivity components...

CVE-2025-25209

The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak tho...

CVE-2025-25209 Rhcl: sharedsecretref can be used to leak secrets severity

The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copying it to the referred namespace. This creates space for a malicious actor with a developer persona access to leak tho...

CVE-2025-25209

CVE-2025-25209 affects Red Hat Connectivity Link. The issue arises in the AuthPolicy metadata, where an object storing secrets assumes they already exist in the kuadrant-system instead of copying them to the referred namespace, enabling a attacker with developer persona access to leak secrets via...