5071 matches found
Code injection
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...
CVE-2018-8902
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...
CVE-2018-8901
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects...
CVE-2018-8901
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects...
CVE-2018-8902
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...
CVE-2018-8901
Ivanti Avalanche vulnerability CVE-2018-8901 affects version 5.3–6.2. A local user with database access can read encrypted passwords for LDAP-authenticated users, with passwords stored in Avalanche databases. Impact is information disclosure for LDAP-enabled configurations. The root cause is desc...
CVE-2018-8902
Ivanti Avalanche (versions 5.3–6.2) contains an information-disclosure vulnerability due to a single shared-key encryption model. An attacker with access to system databases can use the discovered key to read potentially confidential stored data (e.g., Wi‑Fi passwords). The key is reported as usa...
PT-2018-18703
Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions 5.3 through 6.2 Description An issue was discovered where the impacted products use a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access...
PT-2018-18702
Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions 5.3 through 6.2 Description A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche database...
CVE-2018-8902: Improper Authentication
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...
CVE-2018-8901: Undefined Security Weakness
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects...
Ivanti Connect Secure Detection
Binary data pulseconnectsecuredetect.nbin...
Flash, Windows Users: It’s Time to Patch
Adobe and Microsoft each pushed critical security updates to their products today. Adobe's got a new version of Flash Player available, and Microsoft released 14 updates covering more than 75 vulnerabilities, two of which were publicly disclosed prior to today's patch release. The Microsoft updat...
CVE-2018-6316
Ivanti Endpoint Security formerly HEAT Endpoint Management and Security Suite 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in...
Design/Logic Flaw
Ivanti Endpoint Security formerly HEAT Endpoint Management and Security Suite 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in...
CVE-2018-6316
Ivanti Endpoint Security formerly HEAT Endpoint Management and Security Suite 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in...
CVE-2018-6316
Ivanti Endpoint Security formerly HEAT Endpoint Management and Security Suite 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in...
CVE-2018-6316
Affected software/versions: Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) up to 8.5 Update 1 (and earlier). Vulnerability summary: An authenticated user with low privileges and local-network access can bypass application whitelisting via the Application Control m...
PT-2018-17471
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Security versions 8.5 Update 1 and earlier Description The issue allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module in...
CVE-2018-6316: Incorrect Authorization
Ivanti Endpoint Security formerly HEAT Endpoint Management and Security Suite 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in...