919 matches found
CVE-2018-11409
Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key...
CVE-2018-11409: Exposure of Sensitive Information to an Unauthorized Actor
Splunk through 7.0.1 allows information disclosure by appending raw/services/server/info/server-info?outputmode=json to a query, as demonstrated by discovering a license key...
Impinj Speedway Connect R420 RFID Reader Cross-Site Scripting Vulnerability
Impinj Speedway Connect R420 RFID Reader is an identifier used to identify and track objects from Impinj USA. A cross-site scripting vulnerability exists in the 'license key' parameter of the web application in Impinj Speedway Connect R420 RFID Reader versions prior to 2.2.2. A remote attacker...
CVE-2018-5303
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...
CVE-2018-5303: Improper Neutralization of Input During Web Page Generation
An issue was discovered on the Impinj Speedway Connect R420 RFID Reader before 2.2.2. The license key parameter of the web application is vulnerable to Cross Site Scripting; this vulnerability allows an attacker to send malicious code to another user...
CVE-2015-5045
The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...
Information disclosure
The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...
CVE-2015-5045
CVE-2015-5045 affects IBM RLKS Administration and Reporting Tool. The vulnerability allows a local attacker to obtain sensitive information from RLKS before version 8.1.4.9 iFix 04 due to an unspecified issue in the Administration and Reporting Tool. Affected versions include 8.1.4 and 8.1.4.x up...
CVE-2015-5045
The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...
CVE-2015-5045: Exposure of Sensitive Information to an Unauthorized Actor
The Administration and Reporting tool in IBM Rational License Key Server RLKS before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938...
New Relic: [NR Infrastructure] Bypass of #200576 through GraphQL query abuse - allows restricted user access to root account license key
@jonbottarini discovered an issue with our GraphQL implementation. This allowed a user without the proper authorization access to privileged account information on the same account. The writeup for this issue can read here: https://labs.detectify.com/2018/03/14/graphql-abuse/...
CVE-2017-9813
In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312, the scriptName parameter of the licenseKeyInfo action method is vulnerable to cross-site scripting XSS...
New Relic: Logic flaw enables restricted account to access account license key
Hello - this is a resubmission of my report 197071 that was sent to the public NewRelic program. You have a serious logic flaw which results in a restricted account being able to view the account license key. This is able to be performed by logging into a restricted account, clicking on the...
Overview of Windows activation with KMS server
Sometimes after properly following the preparation steps, on start up the Operating System shows only 3 days remaining to be activated, or Office prompts users to activate now, or similar. This doesn’t necessarily indicate an issue with PVS image preparation, or with the streamed image. It’s up t...
New Relic: Leaking license key in source code
Restricted role user has no way to view the license key, but the license key is leaking in the source code. Steps to reproduce Assume userA is owner, userB is restricted user. Login as userB and go to https://rpm.newrelic.com/accounts/accid/applications/setup Select any Web agent, view page sourc...
IBM Rational License Key Server Administration and Reporting Tool 8.1.4.x < 8.1.4.7 XSS
The remote host is running a version of IBM Rational License Key Server Administration and Reporting Tool RLKS that is 8.1.4.x prior to 8.1.4.7. It is, therefore, affected by a cross-site scripting vulnerability that allows an attacker to steal cookies and impersonate a valid user. %NASLMINLEVEL...
CVE-2015-1907: Exposure of Sensitive Information to an Unauthorized Actor
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...
IBM Rational License Key Server Administration and Reporting Tool Information Disclosure Vulnerability
IBM Rational License Key Server Administration and Reporting Tool is a license administration and reporting tool. A security vulnerability in IBM Rational License Key Server Administration and Reporting Tool allows remote attackers to exploit the vulnerability to obtain cookie-based authenticatio...
IBM Rational License Key Server Administration and Reporting Tool 8.1.4.x < 8.1.4.4 Multiple Vulnerabilities
The remote host is running a version 8.1.4.x of IBM Rational License Key Server Administration and Reporting Tool RLKS that is prior to 8.1.4.4. It is, therefore, affected by multiple vulnerabilities : - The secure flag for session cookies is not properly set when in SSL mode. An attacker can...