5906 matches found
Authentication flaw
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...
CVE-2017-16613
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...
CVE-2017-16613
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...
CVE-2017-16613: Improper Authentication
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving unhashed tokens retrieved from the Swauth middleware authentication mechanism to a log file as part of a GET URI. This allow...
PT-2017-14495
Name of the Vulnerable Software and Affected Versions OpenStack Swauth versions through 1.2.0 OpenStack Swift versions through 2.15.1 Description An issue in the middleware.py component of OpenStack Swauth allows attackers to bypass authentication. This occurs because the Swift object store and...
Debian: Security Advisory (DSA-4044-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware AirWatch Console Security Bypass Vulnerability
VMware AirWatch is a console application for the VMware AirWatch Console, a suite of enterprise mobility management solutions from VMware. A security bypass vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to write...
Multiple products postgresql-common package elevation of privilege vulnerability
Debian is a free operating system created by the Debian Project Collaboration with Linux or FreeBSD as its kernel. wheezy, jessie, and unstable are all offshoots of Debian. ubuntu is a suite of desktop application-oriented GNU/Linux operating systems developed by Canonical and the Ubuntu...
Fedora 26 : community-mysql (2017-50c790aaed)
A quarter year regular dose of fixed CVE's. https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html . rhbz1497694 : Fix owner and perms on log file in post script CVE fixes: rhbz1503701 CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279 CVE-2017-10283 CVE-2017-102...
Fedora 25 : community-mysql (2017-95327e44ec)
A quarter year regular dose of fixed CVE's. https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-20.html . rhbz1497694 : Fix owner and perms on log file in post script CVE fixes: rhbz1503701 CVE-2017-10155 CVE-2017-10227 CVE-2017-10268 CVE-2017-10276 CVE-2017-10279 CVE-2017-10283 CVE-2017-102...
CVE-2017-1000171: Insertion of Sensitive Information into Log File
Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text...
Apache jUDDI Security Bypass Vulnerability
Apache jUDDI is the United States Apache Apache Software Foundation of a Java-based , open source follow the UDDI standard application . A security vulnerability exists in versions of Apache jUDDI prior to 2.0. An attacker can exploit the vulnerability to forge entries in log files...
CVE-2009-1197
CVE-2009-1197 concerns Apache jUDDI prior to 2.0, where an error in logging keys via uddiget.jsp can allow an attacker to spoof entries in log files. The affected component is the logging path tied to uddiget.jsp; the underlying issue is log spoofing through error logging of keys. The published d...
Default credentials
Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...
CVE-2017-15366
Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...
CVE-2017-15366
Thornberry NDoc before version 8.0 stores default Cache database credentials with a single password that is written to a plaintext log during laptop client installation. If an attacker obtains this password (even without local access), they can gain full admin/system access to the affected client...
CVE-2017-15366
Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...
PT-2017-14025
Name of the Vulnerable Software and Affected Versions Thornberry NDoc versions prior to 8.0 Description The issue concerns a default database user password that is stored in cleartext in a log file during client installation on laptops. This password can be used to gain full admin or system acces...
CVE-2017-15366: Insertion of Sensitive Information into Log File
Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...
