Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0358

An update of 'libjpeg-turbo', 'nss', 'zookeeper' packages of Photon OS has been released...

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

✍️ Description The faq section of LiveHelperChat can be modified listing some new questions/answers. However, the template is used incorrectly resulting in a CSTI injection which leads to stored XSS. 🕵️‍♂️ Proof of Concept 1. Install the livechat 2. Go on https://your-host.com/siteadmin/faq/view/1...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0351

An update of 'libwebp', 'libxml2', 'mariadb' packages of Photon OS has been released...

Frequently Asked Questions - Moderately critical - Cross Site Scripting - SA-CONTRIB-2021-012

The Frequently Asked Questions faq module allows users, with appropriate permissions, to create question and answer pairs which they want displayed on the 'faq' page. The 'faq' page is automatically generated from the FAQ nodes configured. Basic Views layouts are also provided and can be customis...

Security Vulnerability in Apple’s Silicon “M1” Chip

The website for the M1racles security vulnerability is an excellent demonstration that not all vulnerabilities are exploitable. Be sure to read the FAQ through to the end. EDITED TO ADD: Wired article...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0391

An update of 'libmspack', 'gnutls', 'bindutils' packages of Photon OS has been released...

Veeam My Account Sign In FAQ

Below are the most commonly asked questions. Click to expand Which email should I use to log in to the Veeam My Account Portal? You should use your email associated with the company you work with. If you have worked with Veeam Support before, search through your email client to see which email...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0339

An update of 'nettle' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0382

An update of 'linux-esx', 'linux' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0336

An update of 'redis' packages of Photon OS has been released...

CVE-2021-21438

Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...

CVE-2021-21438

Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...

Design/Logic Flaw

Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...

CVE-2021-21438

The CVE-2021-21438 affects OTRS, specifically the FAQ module. Affected: OTRS 7.0.x up to prior to 7.0.24 and FAQ component up to 6.0.29. Root cause: information disclosure by allowing non-permitted users to view linked FAQ articles. Impact: unauthorized visibility of FAQ content (partial confiden...

CVE-2021-21438 FAQ articles are shown to users without permission

Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...

CVE-2021-21438

Agents are able to see linked FAQ articles without permissions defined in FAQ Category. This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions...

OTRS OTRS 权限许可和访问控制问题漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS that originates from viewing a linked FAQ article without a license...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0326

An update of 'envoy', 'kubernetes' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0367

An update of 'openldap' packages of Photon OS has been released...

Spoofing

A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from...