903 matches found
The Weakest Link in Your Security Posture: Misconfigured SaaS Settings
In the era of hacking and malicious actors, a company's cloud security posture is a concern that preoccupies most, if not all, organizations. Yet even more than that, it is the SaaS Security Posture Management SSPM that is critical to today's company security. Recently Malwarebytes released a...
The Weakest Link in Your Security Posture: Misconfigured SaaS Settings
In the era of hacking and malicious actors, a company's cloud security posture is a concern that preoccupies most, if not all, organizations. Yet even more than that, it is the SaaS Security Posture Management SSPM that is critical to today's company security. Recently Malwarebytes released a...
Asymmetric-key algorithms and symmetric-key algorithms
The symmetry of the algorithm comes from the fact that both parties involved share the same key for both encryption and decryption. It works similar to a physical door where everyone uses a copy of the same key to both lock and unlock the door. A symmetric-key algorithm, just like real doors,...
Key Caching behavior in the DynamoDB Encryption Client.
Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...
GHSA-4PH2-8337-HM62 Key Caching behavior in the DynamoDB Encryption Client.
Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...
Key Caching behavior in the DynamoDB Encryption Client.
Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...
GHSA-W736-HF9P-QQH3 Key Caching behavior in the DynamoDB Encryption Client.
Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...
Key Caching behavior in the DynamoDB Encryption Client.
Impact This advisory concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service that allows for permissions on keys to be modified. When key usage permissions were changed at the key provider, time-based key reauthorization logic in...
PT-2021-24464
Name of the Vulnerable Software and Affected Versions: DynamoDB Encryption Client versions prior to 1.15.0 Description: The issue concerns users of MostRecentProvider in the DynamoDB Encryption Client with a key provider like AWS Key Management Service. When key usage permissions were changed at...
HashiCorp Vault Enterprise Unauthorized Access Vulnerability
HashiCorp Vault is a private key access management tool from HashiCorp USA. An unauthorized access vulnerability exists in HashiCorp Vault Enterprise versions 1.6.0 and 1.6.1 that allows execution of the remove-peer raft operator command on the disaster recovery side without authentication. No...
The vulnerability of the KMS implementation in the Junos operating system allows a attacker to cause failures in the configuration of IPSec channels and service disconnection.
The vulnerability of the Junos operating system’s Key Management Service implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause failures in IPSec channel configurations and service availability...
CVE-2020-1657
On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...
Design/Logic Flaw
On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...
CVE-2020-1657 Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.
On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...
CVE-2020-1657: Incorrect Behavior Order: Early Amplification
On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...
PT-2020-5144
Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 12.3X48-D90 Junos OS on SRX Series versions prior to 15.1X49-D190 Junos OS on SRX Series versions prior to 17.4R2-S9, 17.4R3 Junos OS on SRX Series versions prior to 18.1R3-S9 Junos OS on SRX Series...
The vulnerabilities in implementations of OPC UA data transfer specifications in industrial networks, related to errors in managing cryptographic keys, allow attackers to disclose protected information.
The vulnerability of implementations of the OPC UA data transfer specification in industrial networks is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Fedora: Security Advisory for gnupg2 (FEDORA-2020-69fb22a658)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 33 Update: gnupg2-2.2.23-1.fc33
GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...
USN-4539-1 awl vulnerability
Andrew Bartlett discovered that DAViCal Andrew's Web Libraries AWL did not properly manage session keys. An attacker could possibly use this issue to impersonate a session. CVE-2020-11728...