Authentication flaw

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3449

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3449

CVE-2014-3449 affects BSS Continuity CMS 4.2.22640.0, exposing an Authentication Bypass due to insufficient ACLs that allowed unauthenticated access to the admin interface. The vulnerability was demonstrated by exposing the administrative path /wcm/system/pages/newui/admin.aspx, enabling bypass w...

CVE-2014-3448

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3448

The CVE-2014-3448 issue affects BSS Continuity CMS 4.2.22640.0. Affected component is the ASPX file upload handler, which allows unauthenticated uploads without verifying file type or origin. The root cause is inadequate validation in the upload functionality, enabling remote code execution by pl...

CVE-2014-3447

CVE-2014-3447 affects BSS Continuity CMS 4.2.22640.0 . The vulnerability allows a remote, unauthenticated attacker to overload the underlying database by repeatedly calling a node enumeration script, leading to a Denial of Service within minutes. The issue arises from heavy processing within the ...

CVE-2014-3447

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

PT-2020-7649

Name of the Vulnerable Software and Affected Versions BSS Continuity CMS version 4.2.22640.0 Description The issue is related to an Authentication Bypass. Recommendations For version 4.2.22640.0, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2020-7648

Name of the Vulnerable Software and Affected Versions BSS Continuity CMS version 4.2.22640.0 Description The issue is related to a Remote Code Execution vulnerability caused by unauthenticated file upload. Recommendations For version 4.2.22640.0, update to a newer version that contains a fix for...

CVE-2014-3448: Unrestricted Upload of File with Dangerous Type

BSS Continuity CMS 4.2.22640.0 has a Remote Code Execution vulnerability due to unauthenticated file upload...

CVE-2014-3449: Missing Authentication for Critical Function

BSS Continuity CMS 4.2.22640.0 has an Authentication Bypass vulnerability...

CVE-2014-3447: Uncontrolled Resource Consumption

BSS Continuity CMS 4.2.22640.0 has a Remote Denial Of Service vulnerability...

Ransomware Attack Hits Data Center Provider CyrusOne: Report

U.S. data center provider CyrusOne has been hit by a ransomware attack, which has impacted six of its managed services customers, a report has found. CyrusOne, which is based in Texas and is one of the biggest data center providers in the U.S., serves more than 185 of Fortune 1000 customers...

QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack

Cloud hosting provider iNSYNQ says it is trying to recover from a ransomware attack that shut down its network and has left customers unable to access their accounting data for the past three days. Unfortunately for iNSYNQ, the company appears to be turning a deaf ear to the increasingly anxious...

Wipers - Destruction as a means to an end

This whitepaper post is authored by Vitor Ventura and with contributions from Martin Lee In a digital era when everything and everyone is connected, malicious actors have the perfect space to perform their activities. During the past few years, organizations have suffered several kinds of attacks...

How to mitigate rapid cyberattacks such as Petya and WannaCrypt

In the first blog post of this 3-part series, we introduced what rapid cyberattacks are and illustrated how rapid cyberattacks are different in terms of execution and outcome. In the second blog post, we provided some details on Petya and how it worked. In this final blog post, we will share:...

How to mitigate rapid cyberattacks such as Petya and WannaCrypt

In the first blog post of this 3-part series, we introduced what rapid cyberattacks are and illustrated how rapid cyberattacks are different in terms of execution and outcome. In the second blog post, we provided some details on Petya and how it worked. In this final blog post, we will share:...

Unitrends Backup api/storage input validation vulnerability

Added: 11/29/2017 Background Unitrends Backup is an enterprise backup, ransomware detection, and cloud continuity solution. Problem Unitrends Backup does not properly validate the hostname parameter in a JSON request to the api/storage resource, allowing a remote attacker to bypass authentication...

Akamai Prioritizes People Safety and Continuity of Service during Hurricane Irma

Written by Mani Sundaram, SVP Global Services & Support; Francis Trentley, VP Security Services & Support; Roger Barrango, Director Global Security Operations. Hurricane Irma affected millions this week. As always here at Akamai, taking care of people comes first, and the wellbeing of our team wa...

Cyber Insurance Rates to Rise – What Should I Do?

Organizations manage risk in three ways: they accept it, they take out insurance against it, or they take active measures to diminish its potential impact. These active measures commonly include deploying or enhancing or removing technology, updating policies and procedures, instituting training...