Important: Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update

An update for Jenkins and Jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.12. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The vulnerability of the synchronization application for Qsync Central files arises from the improper assignment of permissions to the critical resource. This allows a malicious actor to gain access to read, modify, or delete data.

The vulnerability of the Qsync Central file synchronization application is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker who operates remotely to gain access to read, modify, or delete data...

Apache Solr Security Vulnerability

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. A security vulnerability exists in Apache Solr versions 6.0.0 through 8.11.2 and 9.0...

The vulnerability of the Rapid SCADA system, related to the improper assignment of permissions for critical resources, allows a intruder to increase their privileges.

The vulnerability of the SCADA system Rapid SCADA is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the RSLinx Classic communication server arises from the improper assignment of permissions to critical resources, allowing attackers to execute arbitrary code.

The vulnerability of the RSLinx Classic communication server is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the microprogramming software for Phoenix Contact Automation Worx Software Suite devices, including AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 470S PN 3TX, RFC 480S PN 4TX, arises from the incorrect assignment of permissions to critical resources. This allows an attacker to gain full access to the device.

The vulnerability of the microprogramming software for Phoenix Contact Automation Worx Software Suite, AXC 1050, AXC 1050 XC, AXC 3050, Config+, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 3xx, PC Worx, PC Worx Express, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC...

The vulnerability of the OpenSearch software package, related to improper storage of permissions, allows a violator to compromise data integrity.

Vulnerability of the OpenSearch software package, related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments, related to improper permission storage, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the EisBaer SCADA system, related to the improper assignment of permissions for critical resources, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system of EisBaer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions, which allows a violator to increase their privileges.

The vulnerability of the SolarWinds Access Rights Manager software lies in the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the file include/page/Article.php in the MediaWiki software, which is used to implement a hypertext environment, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the File/include/page/Article.php script used in implementing the MediaWiki hypertext environment is related to the improper assignment of permissions for the critical resource during the signature request check. Exploiting this vulnerability can allow an attacker operating...

Vulnerability of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved operating systems, related to the improper assignment of permissions for critical resources, allows attackers to increase their privileges.

The vulnerability of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved lies in the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

Gradle Security Vulnerabilities

Gradle is a set of JVM-based project building tools from the US company Gradle, which supports maven, Ivy repositories and more. A security vulnerability exists in Gradle that stems from an improper assignment of permissions when copying files or creating archives. Affected products and versions:...

CVE-2023-30735

Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant...

The vulnerability of the Prompts component in the Google Chrome browser allows attackers to perform spoofing attacks.

The vulnerability of the Prompts component in the Google Chrome browser is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

The vulnerability of Google Chrome’s user tabs allows a hacker to bypass existing security restrictions.

The vulnerability of user tabs in Google Chrome is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

The software’s vulnerability allows for manipulation of data in the configuration files, enabling a intruder to alter the operation and monitoring of the Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC automated control and protection systems.

The vulnerability of the software for managing and monitoring automatic control and protection systems, such as Schweitzer Engineering Laboratories SEL-5033 AcSelerator RTAC, is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability could allow an...

The vulnerability of the command-line interface of the Cisco operating system FX-OS in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances allows a attacker to create or overwrite any file in the file system.

The vulnerability of the command-line interface of the Cisco operating system, Cisco FX-OS, in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances, as well as the Secure Firewall 3100 Series, is related to the improper assignment of permissions for a...

The vulnerability of the Local Discovery Server (LDS) software from Siemens, related to the improper assignment of permissions for critical resources, allows a perpetrator to increase their privileges.

The vulnerability of the Local Discovery Server LDS software from Siemens is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the application for obtaining Intel Support information for Android, related to the improper use of standard permissions, allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Intel Support product information application for Android relates to the improper use of standard permissions. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to information...