Security Bulletin: IBM Storage Insights is vulnerable to weaknesses related to Apache Commons Compress

Summary Vulnerability in Apache Commons Compress may affect IBM Storage Insights. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Apache Commons Compress is vulnerable to a denial of service, caused by improper input validation. By persuading a victim to open a specially crafted TAR file,...

ICP DAS ET-7060 Code Issue Vulnerability

The ICP DAS ET-7060 is a data collector from ICP DAS. A code issue vulnerability exists in ICP DAS ET-7060 version 3.00, which stems from an arbitrary file upload vulnerability...

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system allow attackers to gain unauthorized access to protected information.

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system are related to the transmission of data in an unencrypted form. Exploiting these vulnerabilities can allow a malicious actor to gain unauthorized access ...

The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system allow attackers to execute “man-in-the-middle” type attacks.

The vulnerability of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager storage management system is related to an inconsistency in the host name due to incorrect validation of SSL/TLS certificates. Exploiting this vulnerability could...

CVE-2023-34142

Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02...

CVE-2023-34143

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02...

CVE-2023-34143 Improper Validation of Certificate Vulnerability in Hitachi Device Manager

Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux Device Manager Server, Device Manager Agent, Host Data Collector components allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02...

PT-2023-3688 · Hitachi · Hitachi Device Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Device Manager versions prior to 8.8.5-02 Description: The issue is related to improper validation of certificates with host mismatch in Hitachi Device Manager, which can allow a Man in the Middle Attack. This can be exploited by a...

CVE-2023-2024

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances...

CVE-2023-2025

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances...

CVE-2023-2024

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances...

Authentication flaw

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances...

Design/Logic Flaw

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances...

CVE-2023-2025 Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances...

CVE-2023-2025

OpenBlue Enterprise Manager Data Collector (Johnson Controls) firmware prior to 3.2.5.75 is affected. The ICS/NVD entries describe two related issues: (1) Improper authentication (CWE-287) where API calls may not require authentication, and (2) exposure of sensitive information to an unauthorized...

CVE-2023-2024

OpenBlue Enterprise Manager Data Collector (Johnson Controls) is affected when running firmware versions prior to 3.2.5.75. The vulnerability is described as improper authentication, allowing an unauthorized user to perform API calls under certain circumstances. The advisory details indicate that...

Johnson Controls OpenBlue Enterprise Manager Data Collector 安全漏洞

The Johnson Controls OpenBlue Enterprise Manager Data Collector is an industrial PC from Johnson Controls that provides connectivity to instrumentation and building automation systems to extract data from EM applications. A security vulnerability exists in Johnson Controls OpenBlue Enterprise...

Johnson Controls OpenBlue Enterprise Manager Data Collector 授权问题漏洞

The Johnson Controls OpenBlue Enterprise Manager Data Collector is an industrial PC from Johnson Controls that provides connectivity to instrumentation and building automation systems to extract data from EM applications. A security vulnerability exists in Johnson Controls OpenBlue Enterprise...

PT-2023-17419 · Johnson Controls · Openblue Enterprise Manager Data Collector

Name of the Vulnerable Software and Affected Versions: OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 Description: The issue concerns improper authentication, allowing unauthorized access under certain circumstances. Recommendations: For versions prior to 3.2.5.75, update t...

The vulnerability of the Fluentd data collector and its browser-based manager, fluentd-ui, stems from the default use of a standard password. This allows attackers to execute arbitrary code.

The vulnerability of Fluentd and its browser manager, fluentd-ui, is related to the default use of a standard password. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...