Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Spectrum Protect for Enterprise Resource Planning on Windows (CVE-2019-4732)

Summary Multiple vulnerabilities in IBM Java Runtime Environment were disclosed as part of the IBM Java SDK updates in January 2020. IBM Java Runtime Environment, used by IBM Spectrum Protect formerly Tivoli Storage Manager for Enterprise Resource Planning. has addressed the applicable CVE which...

The vulnerability of Google Chrome, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

The vulnerability of Firefox browsers, related to the lack of protection for service data, allows attackers to gain unauthorized access to information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information...

The vulnerability of the GNOME NetworkManage network connection management tool lies in the lack of protection for service data, allowing a malicious actor to gain unauthorized access to information.

The vulnerability of the GNOME NetworkManage network connection management tool is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information...

The vulnerability of Google Chrome, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information through a specially created Chrome extension...

Principles of a Cloud Migration – Security, The W5H – Episode WHAT?

Teaching you to be a Natural Born Pillar! Last week, we took you through the “WHO” of securing a cloud migration here, detailing each of the roles involved with implementing a successful security practice during a cloud migration. Read: everyone. This week, I will be touching on the “WHAT” of...

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

Dell EMC Data Protection Central 1.0, 1.0.1, 18.1, 18.2, 19.1 Improper Certificate Chain of Trust (DSA-2019-135)

According to its self-reported version number, the version of Dell EMC Data Protection Central hosted on the remote web server is 1.0, 1.0.1, 18.1, 18.2 or 19.1. It is, therefore, affected by an improper certificate chain of trust vulnerability. An unauthenticated, remote attacker can exploit thi...

Dell EMC Integrated Data Protection Appliance Operating System Command Injection Vulnerability

Dell EMC Integrated Data Protection Appliance is a disk-based backup and recovery solution from Dell, Inc.ACM is one of the application configuration management components. An operating system command injection vulnerability exists in the ACM component of the Dell EMC Integrated Data Protection...

CVE-2020-5350

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords...

CVE-2020-5350

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords...

Command injection

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords...

CVE-2020-5350

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords...

CVE-2020-5350

Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0–2.4 contain a command injection vulnerability in the ACM component. A remote authenticated attacker with root privileges could pass crafted parameters to ACM APIs, enabling manipulation of passwords and execution of malicious comma...

CVE-2020-2821

The CVE-2020-2821 entry affects Oracle E-Business Suite, Trade Management (Budget) with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management, with attacks requiring user interacti...

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability in the arch/powerpc/kernel/process.c component of the Linux operating system’s kernel PowerPC microprocessor architecture is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility o...

The vulnerability of the CORS mechanism implementation in Google Chrome browsers stems from insufficient protection of registration data, allowing attackers to gain unauthorized access to information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML pa...

The vulnerability of the Rsyslog log-processing software utility, related to buffer overflow errors, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Rsyslog log-processing software utility is related to buffer overflow errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

March 2016 update for Windows Server 2012 R2 clusters to fix several issues

March 2016 update for Windows Server 2012 R2 clusters to fix several issues This article describes issues in which Data Protection Manager DPM filter driver can't track changes on Cluster Shared Volumes CSV or virtual machine VM configuration resource online fails due to invalid resource state in...

Cybersecurity During COVID-19

Three weeks ago could it possibly be that long already?, I wrote about the increased risks of working remotely during the COVID-19 pandemic. One, employees are working from their home networks and sometimes from their home computers. These systems are more likely to be out of date, unpatched, and...