Moderate: idm:DL1 security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: Kerberos: delegation constrain bypass in S4U2Proxy CVE-2020-17049 ipa: Invalid CSRF protection...

PT-2024-1514 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue exists due to the lack of protection of the web page structure in the Cisco Identity Services Engine ISE management interface. This could allow a remote...

RHEL 9 : .NET 7.0 (RHSA-2024:0151)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0151 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET 8.0 (RHSA-2024:0150)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0150 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

MacOS NetBIOS Identity Information

Binary data macosxnetbiosinfo.nbin...

Moderate: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: Invalid CSRF protection CVE-2023-5455 For more details about the security issues, including the...

CVE-2024-21319

Microsoft Identity Denial of service vulnerability...

CVE-2024-21319

Microsoft Identity Denial of service vulnerability...

Denial of service

Microsoft Identity Denial of service vulnerability...

CVE-2024-21319 Microsoft Identity Denial of service vulnerability

...

CVE-2024-21319 Microsoft Identity Denial of service vulnerability

...

CVE-2024-21319

Microsoft Identity Denial of service vulnerability...

CVE-2024-21319

CVE-2024-21319 is a Microsoft Identity Denial-of-Service vulnerability with a network-exposed attack surface (AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H). Connected sources describe a DoS pattern via maliciously crafted JWE/JWT payloads that trigger heavy memory/CPU usage during decompression or process...

Duplicate Advisory: Microsoft Identity Denial of service vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-59j7-ghrg-fj52. This link is maintained to preserve external references. Original Description Impact An attacker could exploit this vulnerability by crafting a malicious JSON Web Encryption JWE token with a high...

Microsoft Identity Denial of service vulnerability

...

Microsoft SQL Server db_ddladmin Privilege Escalation Vulnerability

Microsoft SQL Server versions 2014 through 2022 suffers from a dbddladmin privilege escalation vulnerability. When escalated to Microsoft as a concern, they instead opted to update their documentation to note that this is possible instead of addressing the issue. Title: SQL Server Privilege...

KLA62826 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Storage Mover can be exploited remotely to...

UBUNTU-CVE-2024-21319

Microsoft Identity Denial of service vulnerability...

Microsoft Identity Services Security Vulnerability

Microsoft Identity Linux Broker is a Linux identity broker from Microsoft Corporation USA. A security vulnerability exists in Microsoft Identity Services. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected: .NET 7.0, .NET...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure Products. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to execute arbitrary code execute arbitrary code on the vulnerable system, with permissions from the process. Due to the nature of the process, the...