CVE-2020-2302

A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page...

Design/Logic Flaw

A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page...

CVE-2020-2302

A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page...

PT-2020-15532 · Jenkins · Jenkins Active Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Active Directory Plugin versions 2.19 and earlier Description: A missing permission check in the Jenkins Active Directory Plugin allows attackers with Overall/Read permission to access the domain health check diagnostic page. This iss...

envoy:health_check_fuzz_test: Crash in std::__1::vector<std::__1::unique_ptr<Envoy::Upstream::HttpHealthCheckerImplTest

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5662540920782848 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: healthcheckfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001990 Cra...

Denial of Service in grpc-ts-health-check

Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status...

lyra-workflow (>=0.1.2 <=0.1.2-rc.1) potentially affected by unknown CVE via grpc-ts-health-check (=1.0.14)

grpc-ts-health-check NPM version =1.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on grpc-ts-health-check and may be impacted: - lyra-workflow =0.1.2, =0.1.2-rc.1 Source cves: unknown CVE Source advisory: OSV:GHSA-M86M-5M44-PC93...

GHSA-M86M-5M44-PC93 Denial of Service in grpc-ts-health-check

Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status...

Server VDA suddenly goes to unregistered state with error: The Security Support Provider Interface (SSPI) negotiation failed.

Studio shows as unregistered. Ping works fine. VDA registration health check tool passes all the tests. Error: Exception System.ComponentModel.Win32Exception 0x80004005: The Security Support Provider Interface SSPI negotiation failed...

Data corruption due to unreliable SMB (CIFS) shares

Challenge Storages that use the SMB CIFS protocol without the continuous availability and write-through features can cause data corruption in case of technical outages. This can lead to restore or backup problems. Cause If shares operate without the continuous availability feature in the...

CVE Api - Parse & filter the latest CVEs from cve.mitre.org

Parse & filter the latest CVEs from https://cve.mitre.org. Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...

Security Bulletin: Session management vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1152)

Summary IBM Sterling Global Integration On-Demand Environment does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. Vulnerability Details CVEID: CVE-2017-1152 DESCRIPTION: IBM Sterling Global Integration On-Deman...

Denial Of Service (DoS)

grpc-ts-health-check is vulnerable to denial of service DoS. The attack is possible as it does not protect its API endpoints, causing failure of service's health and thereby allowing Kubernetes to block traffic to services with a failing status...

Denial of Service

Overview Versions of grpc-ts-health-check prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service's health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing...

[SECURITY] Fedora 30 Update: pacemaker-2.0.1-2.fc30

Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be...

SUSE-SU-2019:0480-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. - CVE-2018-19639: Fixed a code...

WordPress Health Check & Troubleshooting plugin <= 1.2.3 - Authenticated Path Traversal vulnerability

Authenticated Path Traversal vulnerability found by Julien Legras in WordPress Health Check & Troubleshooting plugin versions = 1.2.3. Solution Update the WordPress Health Check & Troubleshooting plugin to the latest available version at least 1.2.4...

WordPress Health Check & Troubleshooting plugin <= 1.2.3 - Authenticated Lack of Authorisation (privilege escalation) vulnerability

Authenticated Lack of Authorisation vulnerability found by Julien Legras in WordPress Health Check & Troubleshooting plugin versions = 1.2.3. Solution Update the WordPress Health Check & Troubleshooting plugin to the latest available version at least 1.2.4...

CVE-2018-5307

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename...

How to Troubleshoot Virtual Delivery Agent (VDA) Registration Issues

Cloud Admins: Run the Cloud Health Check InstructionsandInstallationSelect Cloud Health Check from the dropdown OnPrem Admins: Run the Citrix Scout Health Introduction to Citrix Scout After running the CHC or Scout depending on your environment begin troubleshooting common root causes: 1. Check V...