97 matches found
CVE-2020-27122
A vulnerability in the Microsoft Active Directory integration of Cisco Identity Services Engine ISE could allow an authenticated, local attacker to elevate privileges on an affected device. To exploit this vulnerability, an attacker would need to have a valid administrator account on an affected...
XenMobile - Moving from LDAP to LDAPS
I am planning to turn on LDAPS on our XenMobile servers in the DMZ. We are being sure to open port 636 from our firewall to allow proper LDAPS traffic to flow. I understand there is one additional step to be performed prior to making the switch. I believe I need to export the root certificate fro...
Sonatype Nexus Repository Manager Weak Password Vulnerability
Sonatype Nexus Repository Manager is a maven repository manager. A security vulnerability exists in the LDAP integration feature in Sonatype Nexus Repository Manager 2.14.5 and earlier versions, which stems from the program's use of hard-coded CMMDwoV values to encrypt passwords. An attacker coul...
WordPress Active Directory Integration plugin <=1.1.8 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Active Directory Integration plugin versions = 1.1.8. The plugin is vulnerable due to unescaped $GET‘userid’. Solution 11/20/2017 - we were unable to find a patched version of this plugin...
Active Directory Integration <= 1.1.8 - Authenticated SQL Injection
Type user acces: administrator user. Target need have configured ldap and active. Path Request: /wp-content/plugins/active-directory-integration/syncback.php Line : 135 $result = $ADI-bulksyncback $GET'userid' ; $GET‘userid’ is not escaped. Path Method:...
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 3 (VA MN: 7.0.2-510, VA Agent: 7.0.2-258)
This hotfix for Virtuozzo Automator 7.0.2 provides new features as well as stability and usability bug fixes. Vulnerability id: PVA-34527 Alert reason would not be shown on clicking the alert icon on the virtual environment or hardware node summary page if the corresponding event had already been...
Quest Privilege Manager - pmmasterd Buffer Overflow (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Quest Privilege Manager pmmasterd Buffer Overflow', 'Description' = %q This modules exploits a buffer overflow in the Quest Privilege Manager, a...
Quest Privilege Manager pmmasterd Buffer Overflow Exploit
This Metasploit modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege...
Quest Privilege Manager pmmasterd Buffer Overflow
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Quest Privilege Manager pmmasterd Buffer Overflow', 'Description' = %q This modules exploits a buffer overflow in the Quest Privilege Manager, a...
CVE-2016-9198
A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...
CVE-2016-9198
A vulnerability in the Active Directory integration component of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to perform a denial of service DoS attack. More Information: CSCuw15041. Known Affected Releases: 1.21.199...
CVE-2016-9198
Cisco Identity Services Engine (ISE) Active Directory integration is vulnerable to a DoS via improper handling of PAP authentication requests. The issue allows an unauthenticated, remote attacker to affect authentication requests for subsequent attempts within the same Active Directory domain. Af...
[SECURITY] Fedora 25 Update: freeipa-4.3.2-2.fc25
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
Cisco Identity Services Engine Active Directory integration component denial of service vulnerability
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security vulnerability...
ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities
Exploit for multiple platform in category web applications Document Title: =============== ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities Product & Service Introduction: =============================== SupportCenter Plus is a web-based customer support software that lets...
Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities
Document Title: =============== Igaware UTM WAF v9.2.0-2 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=569 Release Date: ============= 2012-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 569...
