CVE-2018-6501

This CVE-2018-6501 affects ArcSight Management Center (ArcMC) prior to version 2.81, with a vulnerability described as Insufficient Access Controls. The connected records confirm the affected product and version range, and that the impact is uncontrolled access due to access-control shortcomings....

PT-2018-17592

Name of the Vulnerable Software and Affected Versions ArcSight Management Center versions prior to 2.81 Description A potential security issue related to Insufficient Access Controls has been identified. This could be exploited to allow for insufficient access controls. Recommendations For versio...

CVE-2018-6501: Undefined Security Weakness

Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center ArcMC for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls...

CVE-2018-15610 Improper access controls in IP Office one-X Portal

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2...

CVE-2016-7071

CVE-2016-7071 concerns Red Hat CloudForms/CFME where, prior to updates 5.6.2.2 and 5.7.0.7, permissions were not properly enforced for VM IDs supplied by users. A remote, authenticated attacker could exploit this to execute arbitrary VMs on managed systems if they knows the VM ID. The connected R...

PT-2018-4977

Name of the Vulnerable Software and Affected Versions CloudForms versions prior to 5.6.2.2 CloudForms versions prior to 5.7.0.7 Description The issue is related to improper application of permissions controls to VM IDs passed by users. A remote, authenticated attacker could exploit this to execut...

DNS Rebinding Attack Framework: Singularity

Singularity of Origin is a tool to perform DNS rebinding attacks. It includes the necessary components to rebind the IP address of the attack server DNS name to the target machine’s IP address and to serve attack payloads to exploit vulnerable software on the target machine. It also ships with...

CVE-2018-6597

The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a ro...

Privilege escalation

The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a ro...

ALPINE-CVE-2018-10919

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are...

How's that Security Back Door Doing? (Part 2)

In the first part of this blog post I wrote about how recursive DNS rDNS is an attack surface that many enterprises don't currently protect. Bad actors are exploiting that fact and developing advanced targeted threats that use DNS to bypass conventional security tools such as firewalls, secure we...

LG Products SystemUI application intents Access Control Error Vulnerability

LG devices based on Android are smart devices based on the Android platform from the South Korean LG Group. SystemUI application intents is one of the system applications. A security vulnerability exists in SystemUI application intents in LG products based on the Android versions 6.0 to 8.1...

Dispelling the Myths Surrounding Security Technology and GDPR

Many of our customers conducting business in Europe are concerned about how the new General Data Protection Regulation "GDPR" impacts the ability to protect their organization's data, network and IT system resources. In particular, many worry that the requirements of GDPR will restrict their...

On Cache Poisoning

In March 2017, Akamai released a post, "On Web Cache Deception Attacks". A presentation at the Black Hat conference by James Kettle from Port Swigger on web cache poisoning has recently raised awareness of cache poisoning. This is a class of vulnerability with a long history. Cache poisoning can ...

AV-Comparatives: Trend Micro Mobile Security for Android Provides 100% Malware Protection for Mobile Users

With the introduction of Android v8.0 Android Oreo in August of 2017, among other OS improvements Google introduced its built-in malware protection for Android call Play Protect dependent on Google Play Services 11 or later. Play Protect checks apps and APK files downloaded from Google Play or...

ThreatList: Telecom Sector Plagued with Advanced Malware

The telecom sector is being plagued with dangerous types of malware that can lead to significant loss of confidential or regulated data, a report has found. Lastline’s findings, published today, found that telecom sector threats are “ahead of the curve,” based on an analysis of threats to the...

Microsoft Windows Firewall: Private: Inbound connections

This setting determines the behavior for inbound connections that do not match an inbound firewall rule. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Firewall: Public: Logging: Log successful connections

This setting specifies logging when Windows Firewall with Advanced Security allows an inbound connection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Firewall: Private: Logging: Size limit (KB)

This setting specifies the size limit of the file in which Windows Firewall will write its log information. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Windows Firewall: Private: Logging: Log successful connections

This setting specifies logging when Windows Firewall with Advanced Security allows an inbound connection. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...