14996 matches found
CVE-2023-35013
CVE-2023-35013 affects IBM Security Verify Governance Identity Manager virtual appliance component, prior to 10.0.2 FP0000. The issue is an information disclosure risk where a local privileged user could obtain sensitive information from the source code. Remediation provided by IBM: upgrade to 10...
PT-2023-25097 · Ibm · Ibm Security Verify Governance Identity Manager +1
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 IBM Security Verify Governance Identity Manager version 10.0 Description: The issue is related to improper file validation, allowing a privileged user to upload arbitrary files. Additionally, there ...
Security Bulletin: Security Vulnerabilities have been identifed in the IBM WebSphere Liberty product as shipped with the IBM Security Verify Access products.
Summary There are multiple Security vulnerabilities affecting IBM WebSphere Liberty have been fixed in the IBM Security Verify Access ISVA Appliance and Container images. Vulnerability Details CVEID:CVE-2022-22476 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and...
Microsoft Identity Linux Broker Installed (Linux)
Binary data microsoftidentitybrokernixinstalled.nbin...
Security Bulletin: IBM Security Verify Governance - Identity Manager (Virtual Appliance) is affected by multiple vulnerabilities (CVE-2023-35903, CVE-2023-35018, CVE-2023-35013, X-Force ID 220945)
Summary IBM Security Verify Governance - Identity Manager Virtual Appliance is vulnerable to arbitrary file upload, escalation of privileges, and sensitive information leak. These issues have been addressed in this update. Vulnerability Details CVEID:CVE-2023-35903 DESCRIPTION: IBM Security Verif...
Azure Identity SDK Remote Code Execution Vulnerability
Azure Identity SDK is vulnerable to remote code execution...
GHSA-5MFX-4WCX-RV27 Azure Identity SDK Remote Code Execution Vulnerability
Azure Identity SDK is vulnerable to remote code execution...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE by passing a specially crafted OS-level command to a specific SDK property which is passed to the underlying CLI. By exploiting this vulnerability an attacker could gain high privileges, which include read,...
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36415
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36415
Azure Identity SDK Remote Code Execution Vulnerability...
Remote code execution
Azure Identity SDK Remote Code Execution Vulnerability...
Remote code execution
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-44399
ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. While this settings was properly working during the authentication process it...
Design/Logic Flaw
ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. While this settings was properly working during the authentication process it...
CVE-2023-36414 Azure Identity SDK Remote Code Execution Vulnerability
...
CVE-2023-36414 Azure Identity SDK Remote Code Execution Vulnerability
...