3734 matches found
CVE-2013-5420
The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...
Design/Logic Flaw
The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...
CVE-2013-5420
The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...
CVE-2013-5420
IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2’s IMS server prior to Ifix 6 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request. This vulnerability affects ISAM ESSO 8.2 prior to Ifix 6; the exact root cause is not ...
PT-2013-5532
Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO versions 8.2 before Ifix 6 Description The issue allows remote authenticated users with helpdesk privileges to read log files by making a direct request. Recommendations For I...
Cross site request forgery (csrf)
IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...
PT-2013-4811
Name of the Vulnerable Software and Affected Versions IBM SPSS Collaboration and Deployment Services versions 4.2.1 through 4.2.1.3 IF2 and version 5.0 before FP3 Description The issue allows remote authenticated users to read application log files via a direct HTTP request. Recommendations For...
CVE-2013-4044: Exposure of Sensitive Information to an Unauthorized Actor
IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request...
CVE-2012-0425
LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...
Network Security Monitor Framework: Bro
Bro is a passive, open-source network traffic analyzer. It is primarily a security monitor that inspects all traffic on a link in depth for signs of suspicious activity. More generally, however, Bro supports a wide range of traffic analysis tasks even outside of the security domain, including...
DEBIAN-CVE-2013-0337
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the 1 access.log and 2 error.log files, which allows local users to obtain sensitive information by reading the files...
CVE-2013-0337
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the 1 access.log and 2 error.log files, which allows local users to obtain sensitive information by reading the files...
CVE-2013-0337
The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the 1 access.log and 2 error.log files, which allows local users to obtain sensitive information by reading the files...
CVE-2013-4293
The server in Red Hat JBoss Operations Network JON 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files...
CVE-2013-4293
The server in Red Hat JBoss Operations Network JON 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files...
CVE-2013-4293
CVE-2013-4293 affects Red Hat JBoss Operations Network (JON) 3.1.2. The server stores passwords in plaintext in log files, enabling a local attacker with log access to obtain sensitive credentials. This is a local, file-based disclosure vulnerability. The Red Hat advisory RHSA-2013:1448 notes a s...
PT-2013-4940
Name of the Vulnerable Software and Affected Versions Red Hat JBoss Operations Network JON version 3.1.2 Description The issue allows local users to obtain sensitive information by reading the log files, as the server logs passwords in plaintext. Recommendations For Red Hat JBoss Operations Netwo...
How to Change the Settings Related to Veeam Backup & Replication Log Files
Purpose This article documents how to change settings regarding where log files are stored, how large an individual log file may become, and how many generations of log files are retained. Solution Log Files Stored on the Veeam Backup Server The following registry values must be created on the...
