SUSE SLED15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2021:3187-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3187-1 advisory. - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. - CVE-2021-20254: Fixed a buffer overrun in sidstounixids...

CVE-2021-31917

A flaw was found in Red Hat DataGrid 8.x 8.0.0, 8.0.1, 8.1.0 and 8.1.1 and Infinispan 10.0.0 through 12.0.0. An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and...

CVE-2021-31917

A flaw was found in Red Hat DataGrid 8.x 8.0.0, 8.0.1, 8.1.0 and 8.1.1 and Infinispan 10.0.0 through 12.0.0. An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and...

Authentication flaw

A flaw was found in Red Hat DataGrid 8.x 8.0.0, 8.0.1, 8.1.0 and 8.1.1 and Infinispan 10.0.0 through 12.0.0. An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and...

CVE-2021-31917

CVE-2021-31917: Affects Red Hat Data Grid 8.x (8.0.0, 8.0.1, 8.1.0, 8.1.1) and Infinispan (10.0.0–12.0.0). Root cause is an authentication bypass on all REST endpoints when Digest authentication is used, exposing data confidentiality, integrity, and availability risks. Remediation in Red Hat advi...

ALBA-2021:3578 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

CVE-2021-41303

A flaw was found in Apache Shiro. When using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass. The highest threat from this vulnerability is to data confidentiality, integrity as well as system availability...

The vulnerability of the `cdf_read_property_info` and `cdf_read_sat` functions in the utility for determining the type of specified files related to integer overflow allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cdfreadpropertyinfo and cdfreadsat functions, which are used to determine the type of the specified files, is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

The vulnerability of the Drupal CMS system’s kernel, related to the lack of protective measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

The vulnerability of the ipaddress library in the Python programming language lies in insufficient input validation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ipaddress library in the Python programming language is related to the incorrect processing of initial zero characters in octal IP address strings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Drupal CMS system’s kernel, related to the lack of protective measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Drupal CMS system’s kernel lies in the fact that the AJAX API does not disable JSONP by default. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

The vulnerability of the ELParserTokenManager function in the Jakarta EL programming language lies in insufficient validation of input data, allowing attackers to compromise the integrity of the data.

The vulnerability of the ELParserTokenManager function in the Jakarta EL programming language is related to an incorrect definition of the reliability of EL expressions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

The vulnerability of the PreChecks functionality in the standard Bitcoin Core implementation, related to improper authentication, allows a violator to compromise data integrity and cause service failures.

The vulnerability of the PreChecks functionality in the standard Bitcoin Bitcoin Core implementation is related to the incorrect replacement of the child transaction. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

The vulnerability of the Nextcloud desktop synchronization tool’s client relates to authentication process errors, which allow attackers to compromise data integrity.

The vulnerability of the Nextcloud desktop synchronization tool’s client lies in the lack of SSL certificate verification when using the “Register with a Provider” protocol. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structure. This allows attackers to compromise data integrity.

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity o...

The vulnerability of the “pleaseedit” system administration tool is related to an incorrect definition of the link before accessing the file. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the “pleaseedit” system administration tool is related to the use of predictable file names. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service interruptions...