CVE-2020-4357: Generation of Error Message Containing Sensitive Information

IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178761...

PT-2020-18022

Name of the Vulnerable Software and Affected Versions IBM Spectrum Scale versions 5.0.0.0 through 5.0.4.4 Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks against the system...

Security Bulletin: IBM Spectrum Scale GUI is affected by verbose error message (CVE-2020-4357)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale GUI. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4357 DESCRIPTION: IBM Spectrum Scale could allow a remote attacker to obtain sensitive information when a detailed technic...

Error "No Apps available at this time" on workspace for iOS app after upgrading to ADC 13.0 build 52.24

After upgrading ADC to version 13.0 build 52.24 iOS Workspace App misbehaving by presenting a longer form against usual and error "No Apps available at this time"on login...

CVE-2019-18865

Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames...

Information disclosure

Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames...

CVE-2019-18865

Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames...

PT-2020-9996

Name of the Vulnerable Software and Affected Versions: Blaauw Remote Kiln Control versions prior to 3.00r4 Description: The issue allows an unauthenticated attacker to enumerate valid usernames through error message discrepancies in authentication functions. Recommendations: For versions prior to...

Topcoder: Reflected XSS on https://apps.topcoder.com/wiki/page/

Summary: Hi : A reflected XSS occurs on https://apps.topcoder.com/wiki/pages/doeditattachment.action when editing wiki pages attachments. Steps To Reproduce: A user can add attachments on https://apps.topcoder.com/wiki/pages/viewpageattachments.action?pageId=165871793 a wiki page and can edit on...

WEM Agent hung sporadically by logon on "application processing"

WEM Agent 1906 sporadically hung after few logins at "application processing". just logoff and logon helps. Client OS: Citrix Virtual Apps Server with Windows Server 2016 latest Updates Error Message in the Event Log: Error while Configuring Registry Security for DOMAIN\test1 Source: Norskale Age...

CVE-2019-4729

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519...

CVE-2019-4729

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519...

Information disclosure

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519...

PT-2020-11046

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.0 through 11.1 Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the...

CVE-2019-4729: Generation of Error Message Containing Sensitive Information

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519...

JetBrains Hub Input Validation Error Vulnerability

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in JetBrains Hub versions prior to 2020.1.12099. An attacker could exploit the vulnerability to forge the conten...

CVE-2020-11691

JetBrains Hub is affected by a content-spoofing vulnerability in the Hub OAuth error message, exploitable in Hub versions before 2020.1.12099. The issue stems from input validation that could forge OAuth error content, potentially misleading users about authentication status. Affected component: ...

CVE-2020-11691

In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible...

CVE-2020-11691: Undefined Security Weakness

In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible...

PT-2020-12779

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2020.1.12099 Description The issue allows for content spoofing in the Hub OAuth error message. Recommendations For versions prior to 2020.1.12099, update to version 2020.1.12099 or later to resolve the issue...