4324 matches found
iTunes < 12.7 Data Sync Vulnerability (Mac OS)
The version of iTunes installed on the remote Mac OS X host is older than 12.7. It is, therefore, affected by a data sync vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103508; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/12";...
CVE-2017-13779
GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...
CVE-2017-14426
D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices have 0644 /var/etc/shadow aka the /etc/shadow symlink target permissions...
SolarWinds Log and Event Manager < 6.3.1 Hotfix 3 Jailbreak and Privilege Escalation
According to its self-reported version number, the SolarWinds Log and Event Manager installed on the remote host is prior to version 6.3.1 Hotfix 3. It is, therefore, affected by multiple vulnerabilities : - Due to the program setting insecure permissions for management scripts, a remote attacker...
Oracle WebLogic Server Multiple Vulnerabilities (July 2017 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in Jython due to executable classes being created with insecure permissions. A local attacker can exploit this to bypass intended access restrictions and thereby disclose...
Schneider Electric Wonderware InduSoft Web Studio 8.0 Patch 3 Insecure Permissions
Vendor: Schneider Electric Equipment: Wonderware InduSoft Web Studio Vulnerability: Incorrect Default Permissions Advisory URL: https://ipositivesecurity.com/2017/05/19/ics-schneider-electric-wonderware-indusoft-web-studio-privilege-escalation/ ICS-CERT Advisory...
SUSE-SU-2017:1582-1 Security update for Salt
This update for salt provides version 2016.11.4 and brings various fixes and improvements: - Adding a salt-minion watchdog for RHEL6 and SLES11 systems sysV to restart salt-minion in case of crashes during upgrade. - Fix format error. bsc1043111 - Fix ownership for whole master cache directory...
IBM Spectrum Protect Client Windows Registry Credentials Disclosure
The version of IBM Spectrum Protect Client installed on the remote Windows host is affected by an information disclosure vulnerability due to insecure permission for registry keys under the 'HKLM\Software\IBM\ADSM\CurrentVersion\Nodes' key. A local attacker can exploit this vulnerability to...
CVE-2016-6098
IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors...
Tenable Nessus Agent 6.10.x < 6.10.5 Multiple Vulnerabilities (TNS-2017-10)
The version of Nessus Agent installed on the remote host is 6.10.x prior to 6.10.5. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the agent mode functionality due to insecure permissions. An authenticated, remote attacker can exploit...
Insecure Default Permissions
ansible is vulnerable to insecure default permissions. The library does not assign the correct permissions when creating vault files. This can allow a malicious user to have access to sensitive information on these files...
Portrait Display SDK PdiService Insecure Privileges Local Privilege Escalation
The Portrait Displays SDK Service PdiService running on the remote Windows host is affected by a privilege escalation vulnerability due to insecurely configured permissions. The service is writable to all authenticated users on the system while running with AUTHORITY/SYSTEM privileges. A local...
CVE-2017-7849
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode...
Privilege escalation
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode...
Design/Logic Flaw
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode...
CVE-2017-7849
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode...
CVE-2017-7849
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode...
CVE-2017-7850
CVE-2017-7850 affects Nessus Agent 6.10.x prior to 6.10.5 running in Agent Mode. The issue is a local privilege escalation caused by insecure permissions in agent mode, enabling an authenticated local attacker to gain elevated privileges (high impact). Tenable and NVD list this alongside a relate...