CVE-2023-32549

CVE-2023-32549 affects Canonical Landscape where cryptographic keys are generated using a weak pseudo-random generator. The flaw enables potential confidentiality exposure (CVE with network attack vector, no user interaction; CVSS 3.1 base score 7.5). Root cause: insecure PRNG-based key generatio...

CVE-2023-32549 Landscape insecure token generation

Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator...

Canonical Landscape 安全特征问题漏洞

Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that stems from the use of a weak pseudo-randomizer to generate insecure landscape encryption keys...

PT-2023-23872 · Landscape · Landscape

Name of the Vulnerable Software and Affected Versions: Landscape affected versions not specified Description: The issue is related to open redirection caused by allowed URLs in Landscape. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Canonical Landscape 输入验证错误漏洞

Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that originates from allowing open redirects via URLs...

PT-2023-23871 · Landscape · Landscape

Name of the Vulnerable Software and Affected Versions: Landscape affected versions not specified Description: The issue concerns a data leak from Landscape's server-status page, which exposes sensitive system information. This leak includes GET requests that contain information, potentially...

Canonical Landscape 安全漏洞

Canonical Landscape is a system administration tool from Canonical UK. A security vulnerability exists in Canonical Landscape that originates from the server-status page exposing sensitive system information...

A Framework for Enhanced Security: Continuous Threat Exposure Management (CTEM)

If you're a cybersecurity professional, you're likely familiar with the sea of acronyms our industry is obsessed with. From CNAPP, to CWPP, to CIEM and all of the myriad others, there seems to be a new initialism born each day. In this article, we'll look at another trending acronym – CTEM, which...

Webinar with Guest Forrester: Browser Security New Approaches

In today's digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threats to browser security. That's why the Browser Security platform LayerX is hosting a webinar featuring guest speaker Paddy Harrington, a...

Health Industry Cybersecurity Best Practices 2023

This blog explains the new resources of health industry cybersecurity practices and landscape analysis which the HHS U.S. Department of Health and Human Services released in Apr 2023...

Researcher Spotlight: Jacob Finn creates his own public-private partnership at Talos

After working in government for several years, this Talos threat hunter is diving into the dark web Growing up, Jacob Finn says he wanted to be a detective or maybe a veterinarian, but theres still plenty of time for that. Today with Talos, hes a detective. And while hes still hunting for bad...

Inside the 2022 Email Cyber Threat Landscape

Key trends and predictions you should know about...

seattlelandscapearchitecture.com Cross Site Scripting vulnerability OBB-3285671

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Google's cloud division is following in the footsteps of Microsoft with the launch of Security AI Workbench that leverages generative AI models to gain better visibility into the threat landscape. Powering the cybersecurity suite is Sec-PaLM, a specialized large language model LLM that's...

CISA and CESER Releases Software Bill of Materials (SBOM) Sharing Lifecycle Report

CISA and the U.S. Department of Energy DOE Cybersecurity, Energy Security, and Emergency Response CESER have released the SBOM Sharing Lifecycle Report to the cybersecurity and supply chain community. The purpose of this report is to enumerate and describe the different parties and phases of the...

SAP Landscape Management Information Disclosure Vulnerability (CNVD-2023-28117)

SAP Landscape Management is a centralized SAP product management system from SAP Germany. A security vulnerability exists in SAP Landscape Management, which can be exploited by attackers to elevate privileges...

Inside the 2022 Email Cyber Threat Landscape

Key trends and predictions you should know about...

CVE-2023-26458

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

Information disclosure

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...

CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management

An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The...