5895 matches found
Information disclosure
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue...
Information disclosure
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclosure via /UDPUpdates/Config/FullUpdateSettings.xml issue...
CVE-2018-18657
Arcserve UDP up to 6.5 Update 4 is affected by an unauthenticated information disclosure via the EdgeServiceImpl endpoint (/gateway/services/EdgeServiceImpl). The issue, DDI-VRT-2018-18, allows disclosure of sensitive information without authentication. Affected product: Arcserve Unified Data Pro...
CVE-2018-18658
Arcserve UDP before and including 6.5 Update 4 is affected by an unauthenticated information disclosure via the file path /UDPUpdates/Config/FullUpdateSettings.xml (DDI-VRT-2018-20). This CVE (CVE-2018-18658) enables an unauthenticated disclosure of sensitive information in the affected deploymen...
CVE-2018-18658
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclosure via /UDPUpdates/Config/FullUpdateSettings.xml issue...
PT-2018-14569
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection UDP versions through 6.5 Update 4 Description An issue was discovered in Arcserve Unified Data Protection UDP. There is an Unauthenticated XXE issue in the /management/UdpHttpService endpoint. Recommendations F...
CVE-2018-18659: Improper Restriction of XML External Entity Reference
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-19 Unauthenticated XXE in /management/UdpHttpService issue...
CVE-2018-18657: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-18 Unauthenticated Sensitive Information Disclosure via /gateway/services/EdgeServiceImpl issue...
CVE-2018-18658: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-20 Unauthenticated Sensitive Information Disclosure via /UDPUpdates/Config/FullUpdateSettings.xml issue...
CVE-2018-18660: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Arcserve Unified Data Protection UDP through 6.5 Update 4. There is a DDI-VRT-2018-21 Reflected Cross-site Scripting via /authenticationendpoint/domain.jsp issue...
PT-2018-14570
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection UDP versions through 6.5 Update 4 Description An issue was discovered that allows for Reflected Cross-site Scripting via the "authenticationendpoint/domain.jsp" API endpoint. Recommendations For versions throug...
PT-2018-14568
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection UDP versions through 6.5 Update 4 Description An issue was discovered that allows Unauthenticated Sensitive Information Disclosure. The issue is related to the "/UDPUpdates/Config/FullUpdateSettings.xml" API...
PT-2018-14567
Name of the Vulnerable Software and Affected Versions Arcserve Unified Data Protection UDP versions through 6.5 Update 4 Description An issue was discovered that allows Unauthenticated Sensitive Information Disclosure. The issue is related to the /gateway/services/EdgeServiceImpl "API Endpoint"...
Site security & user friendliness: Top E-commerce qualities for 2018
By Carolina It seems security breaches have not just become common, but prevalent throughout society. Between allegations of hacking into voting systems, and then into the most influential social media platforms, digital security has never been more critical. Users and businesses alike must do al...
UK Slaps Facebook with $645K Fine Over Cambridge Analytica Scandal
The UK has fined Facebook $645,000 over Cambridge Analytica’s data harvesting practices, which exploited the data of 87 million users of the social network. That represents a gnat bite for the tech giant, which generated $5.1 billion in net profit in the second quarter of the year. However, the...
Facebook Fined £500,000 for Cambridge Analytica Data Scandal
Facebook has finally been slapped with its first fine of £500,000 for allowing political consultancy firm Cambridge Analytica to improperly gather and misuse data of 87 million users. The fine has been imposed by the UK's Information Commissioner's Office ICO and was calculated using the UK's old...
Best Practices for Endpoint Detection and Response
There are many elements that can complicate enterprise security efforts. From the increasing sophistication of cybercriminal strategies and activities to the wide range of components connected to the network, data protection and infrastructure security has become an uphill battle. Another key...
Small businesses to receive NIST assistance: Overlooked areas of the NIST framework
In years past, it was a challenge for organizations across every industry to ensure they were protected against the risks of - and ready to respond to - a cybersecurity incident. Decision-makers and IT administrators alike followed the advice of experts and worked to create strong safeguards and...
Take steps to secure your business and users with our security business assessment
Businesses can no longer afford to take cybersecurity for granted. You cant read the news without seeing a splashy headline about a successful hack or data breach at a well-known company. However, this isnt just a problem for large enterprisesincreasingly small and medium-sized businesses are...
