Unspecified Vulnerability in Mitsubishi Electric smartRTUs and Inea ME-RTUs

Mitsubishi Electric smartRTU is an intelligent Remote Terminal Unit RTU from Mitsubishi Electric, Japan.Inea ME-RTU is an intelligent communication gateway product from Inea, Slovenia. A security vulnerability exists in Mitsubishi Electric smartRTU version 2.02 and earlier and INEA ME-RTU version...

CloudBees Jenkins Audit to Database Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit to Database Plugin is used in which a...

CloudBees Jenkins Artifactory Plugin Unauthorized Access Vulnerability (CNVD-2019-23826)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Artifactory Plugin is used in one of the...

IBM Cloud Private Information Disclosure Vulnerability

IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. An information disclosure vulnerability exists in IBM Cloud Private version 2.1.0, which originates from a program that sets the CA Private Key to ...

YaST2 network file read vulnerability

Novell YaST Yet another Setup Tool is a set of RPM-based installation and configuration tools for the openSUSE and SUSE Linux Enterprise operating systems from the U.S. company Novell. The tool can configure the system hardware, network, services, etc. YaST2 network is one of the packages to mana...

Design/Logic Flaw

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as...

CVE-2015-2263

CVE-2015-2263 affects Cloudera Manager 4.x and 5.x releases (before 5.0.6, 5.1.5, 5.2.5, and 5.3.3 respectively). The root cause is that, during YARN NodeManager startup, the product grants global read permissions to files in its configuration directory. This enables local users to read sensitive...

CVE-2015-2263

Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when starting YARN NodeManager, which allows local users to obtain sensitive information by reading the files, as...

Puppet Enterprise Puppet Server Information Disclosure Vulnerability

Puppet Server is a set of U.S. Puppet Labs based on the client / server C / S architecture of the configuration management tool . The tool can be used to manage configuration files , users, cron tasks, packages, system services and so on. A security vulnerability exists in Puppet Enterprise versi...