CVE-2023-32265

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration ESCWA component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be authenticated into ESCWA to attempt to...

CVE-2023-32265

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration ESCWA component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be authenticated into ESCWA to attempt to...

CVE-2023-32265

Summary (CVE-2023-32265): The vulnerability affects the Enterprise Server Common Web Administration (ESCWA) component used across Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An authenticated ESCWA user could exploit conditions described in the ...

Security Bulletin: Multiple Vulnerabilities found in the IBM Security Directory Integrator as shipped with the IBM Security Directory products

Summary Vulnerabilities found in the IBM Security Directory Integrator bundled with the IBM Security Directory Server and IBM Security Verify Directory Software have been published and addressed in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: Multiple vulnerabilities have been identified in IBM Security Directory Integrator shipped with IBM Security Directory Server

Summary IBM Security Directory Integrator is shipped with IBM Security Directory Server. Information about security vulnerabilities affecting IBM Security Directory Integrator has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Moderate: Red Hat Security Advisory: redhat-ds:12 security, bug fix, and enhancement update

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.1 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Directory Server, IBM Security Directory Suite and IBM Security Verify Directory.

Summary Multiple Security Vulnerabilities have been fixed in IBM Security Directory Server, IBM Security Directory Suite and IBM Security Verify Directory. Vulnerability Details CVEID:CVE-2016-3012 DESCRIPTION: IBM API Connect server credentials used for a specific restricted scenario may have be...

Security Bulletin: Multiple Security Vulnerabilities have been fixed in the IBM Directory Server and IBM Directory Suite products (CVE-2022-21496, CVE-2021-35550, CVE-2021-2163, CVE-2021-35603)

Summary Multiple Security Vulnerabilities in the IBM Java SDK as shipped with the IBM Directory Server and IBM Directory Suite products have been fixed. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an...

Security Bulletin: Multiple Security Vulnerabilities have been fixed in the IBM Directory Server and IBM Directory Suite products (CVE-2022-22476, CVE-2022-34165)

Summary Multiple Security Vulnerabilities in the IBM WebSphere Application Server product as shipped with the IBM Directory Server and IBM Directory Suite products have been fixed. Vulnerability Details CVEID:CVE-2022-22476 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through...

The vulnerability of the 389 Directory Server’s authentication process, related to incorrect session duration, allows attackers to gain access to confidential data.

The vulnerability of the 389 Directory Server’s authentication service is related to an incorrect session duration. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the 389 Directory Server service, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the 389 Directory Server catalog service server is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

The authentication vulnerability of the 389 Directory Server server, which arises from information disclosure due to inconsistencies, allows attackers to gain access to confidential data.

The vulnerability of the 389 Directory Server’s authentication service relates to the disclosure of information during the verification of the existence of a record in the database. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to confidential data...

The vulnerability of the 389 Directory Server, a catalog service server, related to pointer assignment errors, allows attackers to cause service failures.

The vulnerability of the 389 Directory Server catalog service server is related to pointer redirection errors. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the 389 Directory Server server, related to authentication procedures’ flaws, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the 389 Directory Server catalog service server is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to confidential data and compromise its integrity...

Jenkins Plugin LDAP 跨站请求伪造漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2023-24111 · Jenkins · Jenkins Ldap Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins LDAP Plugin versions 673.v034ec70ec2b b and earlier Description: A cross-site request forgery CSRF vulnerability in the Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified...

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

OESA-2023-1233 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.CVE-2023-0225 The Samb...

AZL-26215 CVE-2023-0922 affecting package samba 4.12.5-7

The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection...