817 matches found
CVE-2024-10125
The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...
CVE-2024-10125 Lack of JWT issuer and signer validation
The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcorevalidatetokensignature contains Middleware that can be used in conjunction with the Application Load Balancer ALB OpenId Connect integration and can be used in any ASP.NET...
CVE-2024-10125
CVE-2024-10125 concerns the Amazon.ApplicationLoadBalancer.Identity.AspNetCore middleware used with ALB OpenID Connect in ASP.NET Core deployments. The root cause is that JWT handling performs signature validation but fails to validate the JWT issuer and signer identity, enabling a signed token f...
AWS VDP: Reflected XSS on Amazon EC2 Instance
Product: Amazon Elastic Compute Cloud Amazon EC2 Vulnerability Type: Reflected Cross-Site Scripting XSS CVE: CVE-2022-29548 Severity: Medium Description: A reflected XSS vulnerability was discovered on the Amazon EC2 instance, allowing an attacker to inject malicious JavaScript code, potentially...
The vulnerability of the EC2 Cloud Profile module in the Continuous Integration and Delivery application delivery system of JetBrains TeamCity allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the EC2 Cloud Profile module in the Continuous Integration and Delivery application delivery system CI/CD of JetBrains TeamCity is related to insufficient protection for registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain...
RHSA-2017:2811 Red Hat Security Advisory: eap7-jboss-ec2-eap security update
Bulletin has no description...
RHSA-2017:1552 Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2017:1412 Red Hat Security Advisory: eap7-jboss-ec2-eap security update
Bulletin has no description...
RHSA-2017:1260 Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2016:1432 Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2015:2542 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.5 jboss-ec2-eap update
Bulletin has no description...
RHSA-2015:1907 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 jboss-ec2-eap update
Bulletin has no description...
RHSA-2015:1673 Red Hat Security Advisory: jboss-ec2-eap bug fix security update
Bulletin has no description...
The vulnerability of the amazon.aws.ec2_instance configuration management module in Ansible, related to parameter processing errors, allows an attacker to access sensitive data.
The vulnerability of the amazon.aws.ec2instance configuration management module in Ansible is related to an error in parameter processing involving the towercallback. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
RHSA-2016:2072 Red Hat Security Advisory: jboss-ec2-eap security and enhancement update for EAP 6.4.11
Bulletin has no description...
RHSA-2017:3458 Red Hat Security Advisory: eap7-jboss-ec2-eap security update
Bulletin has no description...
RHSA-2018:1451 Red Hat Security Advisory: eap6-jboss-ec2-eap security update
Bulletin has no description...
RHSA-2017:2638 Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
Bulletin has no description...