764 matches found
CVE-2023-32550 Landscape's Apache server-status is accessible by default
Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API...
CVE-2023-32550
The CVE-2023-32550 issue affects Landscape: Landscape’s server-status page exposes sensitive system information via GET requests, enabling leakage that could assist further attacks on the Landscape API. According to the sources, this data exposure is the primary vulnerability, with CVSS scores in...
CVE-2023-32549 Landscape insecure token generation
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator...
CVE-2023-32549
CVE-2023-32549 affects Canonical Landscape where cryptographic keys are generated using a weak pseudo-random generator. The flaw enables potential confidentiality exposure (CVE with network attack vector, no user interaction; CVSS 3.1 base score 7.5). Root cause: insecure PRNG-based key generatio...
CVE-2023-32549 Landscape insecure token generation
Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator...
Canonical Landscape 安全特征问题漏洞
Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that stems from the use of a weak pseudo-randomizer to generate insecure landscape encryption keys...
Canonical Landscape 输入验证错误漏洞
Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that originates from allowing open redirects via URLs...
Canonical Landscape 安全漏洞
Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that originates from the server-status page exposing sensitive system information...
PT-2023-23871 · Landscape · Landscape
Name of the Vulnerable Software and Affected Versions: Landscape affected versions not specified Description: The issue concerns a data leak from Landscape's server-status page, which exposes sensitive system information. This leak includes GET requests that contain information, potentially...
PT-2023-23872 · Landscape · Landscape
Name of the Vulnerable Software and Affected Versions: Landscape affected versions not specified Description: The issue is related to open redirection caused by allowed URLs in Landscape. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
A Framework for Enhanced Security: Continuous Threat Exposure Management (CTEM)
If you're a cybersecurity professional, you're likely familiar with the sea of acronyms our industry is obsessed with. From CNAPP, to CWPP, to CIEM and all of the myriad others, there seems to be a new initialism born each day. In this article, we'll look at another trending acronym – CTEM, which...
Webinar with Guest Forrester: Browser Security New Approaches
In today's digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threats to browser security. That's why the Browser Security platform LayerX is hosting a webinar featuring guest speaker Paddy Harrington, a...
Health Industry Cybersecurity Best Practices 2023
This blog explains the new resources of health industry cybersecurity practices and landscape analysis which the HHS U.S. Department of Health and Human Services released in Apr 2023...
Researcher Spotlight: Jacob Finn creates his own public-private partnership at Talos
After working in government for several years, this Talos threat hunter is diving into the dark web Growing up, Jacob Finn says he wanted to be a detective or maybe a veterinarian, but theres still plenty of time for that. Today with Talos, hes a detective. And while hes still hunting for bad...
Inside the 2022 Email Cyber Threat Landscape
Key trends and predictions you should know about...
seattlelandscapearchitecture.com Cross Site Scripting vulnerability OBB-3285671
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis
Google's cloud division is following in the footsteps of Microsoft with the launch of Security AI Workbench that leverages generative AI models to gain better visibility into the threat landscape. Powering the cybersecurity suite is Sec-PaLM, a specialized large language model LLM that's...
CISA and CESER Releases Software Bill of Materials (SBOM) Sharing Lifecycle Report
CISA and the U.S. Department of Energy DOE Cybersecurity, Energy Security, and Emergency Response CESER have released the SBOM Sharing Lifecycle Report to the cybersecurity and supply chain community. The purpose of this report is to enumerate and describe the different parties and phases of the...
SAP Landscape Management Information Disclosure Vulnerability (CNVD-2023-28117)
SAP Landscape Management is a centralized SAP product management system from SAP Germany. A security vulnerability exists in SAP Landscape Management, which can be exploited by attackers to elevate privileges...