1833 matches found
CVE-2016-0715
CVE-2016-0715 affects Pivotal Cloud Foundry Elastic Runtime versions 1.4.0–1.4.5, 1.5.0–1.5.11, and 1.6.0–1.6.11, enabling remote information disclosure. The issue stems from incomplete mitigation guidance tied to CVE-2016-0708, leaving PHP Buildpack, Staticfile Buildpack, and potentially other c...
CVE-2016-0715
Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigation configuration instructions provided as part of CVE-2016-0708 were incomplete and could leave PHP...
RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2016:1840)
An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 and Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
Open Source Host & Endpoint Security: Wazuh
Wazuh is a security detection, visibility, and compliance open source project. It was born as a fork of OSSEC HIDS, later was integrated with Elastic Stack and OpenSCAP evolving into a more comprehensive solution. Wazuh helps you to gain deeper security visibility into your infrastructure by...
Security Bulletin: A vulnerability in IBM Java SDK affects IBM Spectrum Scale packaged in IBM Elastic Storage Server
Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Elastic Storage Server. This issue was disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details CVEID: CVE-2018-2783 DESCRIPTION: An unspecified vulnerability in Oracle Java SE...
Security Bulletin: The Elastic Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2018-1512)
Summary The Elastic Storage Server are affected by a vulnerability in IBM Spectrum Scale with CES stack enabled that could allow sensitive data to be included with service snaps. This data could be sent to IBM during service engagements CVE-2018-1512 Vulnerability Details CVEID: CVE-2018-1512...
eve-elastic (=2.6.0), eve-sqlalchemy (>=0.5.0 <=0.7.1) +1 more potentially affected by CVE-2018-8097 via eve (>=0.6.4 <=0.7.10)
eve PYPI version =0.6.4, =0.5.0, =1.0.0, =1.4.0rc2 Source cves: CVE-2018-8097 Source advisory: OSV:GHSA-8JXQ-75RW-FHJ9...
Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale
Summary The Elastic Storage Server and the GPFS Storage Server are affected by a multiple GSKit vulnerability in IBM Spectrum Scale. Vulnerability Details CVEID: CVE-2018-1431 DESCRIPTION: A vulnerability in GSKit affects IBM Spectrum Scale that could allow a local attacker to obtain control of t...
EMC ECS S3 Authentication Bypass Vulnerability
Dell EMC Elastic Cloud Storage ECS is an object storage application designed for traditional and next-generation workloads. An authentication bypass vulnerability exists in Dell EMC ECS versions 3.2.0.0 and 3.2.0.1, which can be exploited by a remote, unauthenticated attacker to read and modify S...
Elastic Elasticsearch Public WAN (Internet) / Public LAN Accessible
The script checks if the target host is running an Elastic Elasticsearch service accessible from a public WAN Internet / public LAN. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
UPM Roaming Profiles "Break" if App Layering Elastic Layering is Enabled
UPM roaming profiles "break" if enabling App Layering Elastic Layering feature. Can’t right click the start menu, can’t open programs, etc...
Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2017-1654)
Summary The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale that could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. Vulnerability Details CVEID:...
Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2017-1304)
Summary Use of IBM Spectrum Scale on an Elastic Storage Server/GPFS Storage Server in an unsupported configuration, where user applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file, may result in a daemon failure,...
Elastic Cloud Enterprise 1.1.4 security update
Elastic Cloud Enterprise use of shared encryption key ESA-2018-09 In Elastic Cloud Enterprise ECE versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable...
FAQ: Login performance with Elastic Layers
Why are user logins with Elastic Layers enabled slower than normal logins on a non-EL image? Why are logins slower depending on how many Elastic Layer assignments a user has? Background: When you define an Image Template in the Layering Management Console LMC, you have to select the Elastic...
How to set the default size of the Elastic Layering writable volume
When Elastic Layering is enabled with or without User Layers, the boot disk is created with an extra 20GB as a second partition where the user writes will be stored. This is necessary to keep writes at a layer above the boot disk and any elastically assigned layers that might show up later. If yo...
heatmaprestapi-production.eu-west-1.elasticbeanstalk.com XSS vulnerability
Open Bug Bounty ID: OBB-624731 Description| Value ---|--- Affected Website:| heatmaprestapi-production.eu-west-1.elasticbeanstalk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...
RHEL 6 : eap6-jboss-ec2-eap (RHSA-2018:1451)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1451 advisory. The jboss-ec2-eap packages provide scripts for Red Hat JBoss Enterprise Application Platform running on the Amazon Web Services AWS Elastic...
Elastic Stack 6.2.4 and 5.6.9 security update
X-Pack Machine Learning XSS vulnerability ESA-2018-06 X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting XSS vulnerability. Users with manageml permissions could create jobs containing malicious data as part of their configuration that could allow the attacker to...