SAP NetWeaver Log Viewer Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company developed a set of service-oriented integrated application platform. The platform can provide a development and operation environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver. A remote attacker could exploit the...

McAfee Agent (MA) 'log viewer' Denial of Service Vulnerability

McAfee Agent is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Agent Remote Denial of Service Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A remote denial of service vulnerability exists in McAfee Agent, which can be triggered by an attacker by constructi...

PT-2016-18

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The issue exists due to incorrect restriction of the directory path name with limited access in the Log Viewer component of the SAP NetWeaver platform. This allows an attacker to bypass...

Microsoft WinDbg - logviewer.exe Crash (PoC)

Exploit for windows platform in category dos / poc + Credits: HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MS-WINDBG-LOGVIEWER-BUFFER-OVERFLOW.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product: ====================...

Microsoft WinDbg - 'logviewer.exe' Crash (PoC)

Credits: HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MS-WINDBG-LOGVIEWER-BUFFER-OVERFLOW.txt + ISR: ApparitionSec Vendor: ================= www.microsoft.com Product: ==================== WinDbg logviewer.exe LogViewer logviewer.exe, a tool...

redhat-support-plugin-rhev: Remote code execution by SuperUser role on hosts in RHEV

It was found that redhat-support-plugin-rhev passed a user-specified path and file name directly to the command line in the log viewer component. This could allow users with the SuperUser role on any Entity to execute arbitrary commands on any host in the RHEV environment...

CVE-2014-6190

The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for the URL of a log document...

CVE-2014-6190

The CVE-2014-6190 issue affects IBM Workload Deployer (IBM Workload Deployer 3.1 before 3.1.0.7). The vulnerability in the Log Viewer allows remote attackers to obtain sensitive information by requesting the URL of a log document, caused by defined system users lacking proper permission controls....

CVE-2014-6190: Exposure of Sensitive Information to an Unauthorized Actor

The log viewer in IBM Workload Deployer 3.1 before 3.1.0.7 allows remote attackers to obtain sensitive information via a direct request for the URL of a log document...

PT-2015-3831

Name of the Vulnerable Software and Affected Versions IBM Workload Deployer version 3.1 before 3.1.0.7 Description The issue allows remote attackers to obtain sensitive information via a direct request for the URL of a log document in the log viewer. Recommendations For IBM Workload Deployer...

dashboard: log file arbitrary file retrieval

It was found that the local log-viewing function of the redhat-access-plugin for OpenStack Dashboard horizon did not sanitize user input. An authenticated user could use this flaw to read an arbitrary file with the permissions of the web server...

McAfee Managed Agent Input Validation Vulnerability

McAfee Managed Agent MA is a suite of agent programs from the American company McAfee. The main task of the program is to periodically download updates, policies, tasks, etc. from the server. A security vulnerability exists in the log viewer of McAfee MA versions 4.8.0 and earlier and 5.0.0. When...

Spoofing

The log viewer in McAfee Agent MA before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability...

CVE-2015-2053

The CVE-2015-2053 issue affects McAfee Agent log viewing: if the “Accept connections only from the ePO server” setting is disabled, remote attackers can perform a clickjacking attack via a crafted web page. Affected releases are MA 4.8.0 prior to Patch 3 and MA 5.0.0 prior to 5.0.1 (and related M...

CVE-2015-2053

The log viewer in McAfee Agent MA before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability...

CVE-2015-2053: Improper Input Validation

The log viewer in McAfee Agent MA before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled, allows remote attackers to conduct clickjacking attacks via a crafted web page, aka an "http-generic-click-jacking" vulnerability...

PT-2015-5570

Name of the Vulnerable Software and Affected Versions McAfee Agent versions prior to 4.8.0 Patch 3 McAfee Agent versions prior to 5.0.0 Description The issue allows remote attackers to conduct clickjacking attacks via a crafted web page when the "Accept connections only from the ePO server" optio...

[SECURITY] Fedora 20 Update: kdeadmin-4.14.1-1.fc20

The kdeadmin metapackage includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...

Talking about my company for security emergency response-vulnerability warning-the black bar safety net

0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...