Lucene search
+L

279 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...

8.5CVSS6.5AI score0.01763EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.0208EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.8 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.0208EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.12 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

7.8CVSS6.6AI score0.00711EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.7 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7AI score0.02237EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.11 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges and expose protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges and expose sensitive information...

4.9CVSS6.2AI score0.02075EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/07/06 9:15 p.m.2 views

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

8.8CVSS5.8AI score0.01174EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/06 9:15 p.m.20 views

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

9CVSS0.01174EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/06 9:15 p.m.20 views

Improper access control

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

9CVSS8.6AI score0.01174EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2022/07/06 8:30 p.m.148 views

CVE-2022-20859

CVE-2022-20859 affects Cisco Unified Communications Manager (CUCM), Unified CM IM&P, and Cisco Unity Connection in the Disaster Recovery framework. Root cause: insufficient access control checks allowing an authenticated, read-only user to run a vulnerable command and perform administrative actio...

9CVSS7.5AI score0.01174EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2022/07/06 8:30 p.m.22 views

CVE-2022-20859 Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

6.5CVSS8.9AI score0.01174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/07/06 8:30 p.m.11 views

CVE-2022-20859 Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

6.5CVSS6.9AI score0.01174EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/07/06 4:0 p.m.52 views

Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

6.5CVSS7.5AI score0.01174EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/06 4:0 p.m.7 views

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

9CVSS7.3AI score0.01174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/07/06 12:0 a.m.4 views

PT-2022-3510 · Cisco · Cisco Unity Connection +2

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unity Connection versions affected versions not specified...

9CVSS8.6AI score0.01174EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.11 views

The vulnerability of the Azure Site Recovery disaster recovery tool, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

9CVSS7.6AI score0.0207EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/04/15 12:0 a.m.7 views

Kaseya Unitrends Client/Agent 安全漏洞

Kaseya Unitrends Client/Agent is a cloud-based enterprise backup and disaster recovery technology from Kaseya Corporation, USA. A security vulnerability exists in Kaseya Unitrends Client/Agent version 10.5.5 and prior versions. An attacker can exploit this vulnerability to execute arbitrary code...

9.8CVSS8.7AI score0.01826EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2022/04/13 2:50 a.m.32 views

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

6.8AI score
SaveExploits0
OSV
OSV
added 2022/04/04 3:15 p.m.4 views

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

7.8CVSS7.1AI score0.00449EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.6 views

Vembu BDR Suite 代码问题漏洞

Vembu BDR Suite is a virtual machine management system. A security vulnerability exists in Vembu BDR Suite 4.2.0.1, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

7.8CVSS7.5AI score0.00449EPSS
SaveExploits1References5
Rows per page
Query Builder