CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

Sql injection

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

Authorization

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6256

SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check...

CVE-2020-6256

CVE-2020-6256 concerns SAP Master Data Governance, versions 748–804, where a missing authorization check allows users to display change request details without the required permissions. Connected sources (Red Hat advisory, CNVD, CVE listings, and national CERT/NCSC-style notes) consistently ident...

CVE-2020-6249

The CVE-2020-6249 entry describes a SQL injection vulnerability in SAP Master Data Governance (MDG) where the admin backend report enables an attacker to craft database queries that expose the backend database. Affected components include MDG in SAP S4CORE 101, S4FND 102–104, SAP_BS_FND 748. The ...

Dell EMC RSA Archer Information Disclosure Vulnerability (CNVD-2020-31252)

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in versions prior to Dell...

Data governance matters now more than ever

Knowing, protecting, and governing your organizational data is critical to adhere to regulations and meet security and privacy needs. Arguably, that’s never been truer than it is today as we face these unprecedented health and economic circumstances. To help organizations to navigate privacy duri...

What the NIST Zero Trust Architecture Means for Business Continuity

In September 2019, NIST National Institute of Standards and Technology published the first draft of its Zero Trust Architecture ZTA for public feedback. A second draft was issued in February 2020 that incorporated industry feedback from the first cycle and solicited more comments. The document is...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to WAS vulnerabilty (CVE-2019-4441).

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The vulnerability concerns IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty: a remote attacker could obtain sensitive information when a stack trace...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to OpenSSH vulnerabilty (CVE-2018-15473).

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability, 1 issue for OpenSSH: a remote attacker could obtain sensitive information by sending a specially crafted request. Vulnerability Details CVEID: CVE-2018-15473...

Security Bulletin: IBM InfoSphere Governance Catalog is affected by a cross-site scripting vulnerability

Summary A cross-site scripting vulnerability was addressed by IBM InfoSphere Governance Catalog. Vulnerability Details CVEID: CVE-2020-4162 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-11214, CVE-2018-11213, CVE-2018-11212)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-12404)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-15473)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing th...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2019-3815)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. A memory leak was discovered in the...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2019-11479, CVE-2019-11478, CVE-2019-11477)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerability. The kernel packages contain the Linux kernel, the core of any Linux operating system. An integer overflow flaw was found in the way the Linux kernel's networking...

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance Authorization Issues Vulnerabilities

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance are a suite of authentication and lifecycle management solutions from Dell, USA. An authorization issue vulnerability exists in Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance versions...

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance Access Control Error Vulnerabilities

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance are a suite of authentication and lifecycle management solutions from Dell, USA. An access control error vulnerability exists in Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance versions...