Security Bulletin: IBM MDM Software report download without authentication affects IBM InfoSphere Master Data Management Collaboration Server

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user to download reports without authentication Vulnerability Details CVEID: CVE-2017-1523 DESCRIPTION: IBM InfoSphere Master Data Management - Collaborative Edition could allow an unauthorized user ...

Security Bulletin: Session Identifier Not Updated vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-3009)

Summary IBM InfoSphere Master Data Management - Collaborative Edition does not update the session identifier after a successful authentication. An attacker could exploit this vulnerability to gain unauthorized access to the application by acting as the session created by a regular user...

Security Bulletin: Unix File Parameter Alteration vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-3064).

Summary IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to a Unix file parameter alteration vulnerability. This vulnerability might allow unauthorized access to data; specifically, an authorized person might be able to copy files from the InfoSphere MDM - Collaborati...

Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-0114)

Summary Apache Struts 1.X could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability by using the class parameter of an ActionForm object to manipulate the ClassLoade...

Use Windows Information Protection (WIP) to help make accidental data leakage a thing of the past

Have you always wished you could have mobile application management MAM on Windows? Now you can! Windows Information Protection WIP is an out-of-the box data leakage prevention feature for Windows 10 that can automatically apply protection for work files and data to prevent accidental data leakag...

FAQ: XenMobile 10 and NetScaler Gateway Integration

Citrix Endpoint Management, formerly XenMobile Service This article contains frequently asked questions about XenMobile 10 and NetScaler 10.5 Integration. Q:What versions of NetScaler are supported withXenMobile 10 deployment wizard? Q:Do I need to upgrade to NetScaler 10.5 to integratewith...

Design/Logic Flaw

The Device Administrator code in Android before 4.4.1r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure...

CVE-2014-0900

The Device Administrator code in Android before 4.4.1r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure...

CVE-2014-0900

The Device Administrator code in Android before 4.4.1r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure...

CVE-2014-0900

CVE-2014-0900 affects the Android Device Administrator code prior to 4.4.1_r1. The root cause is the failure to update the mAdminMap data structure, which may allow an attacker to spoof device administrators and thereby bypass Mobile Device Management (MDM) restrictions. Documents indicate the im...

CVE-2014-0900: Improper Input Validation

The Device Administrator code in Android before 4.4.1r1 might allow attackers to spoof device administrators and consequently bypass MDM restrictions by leveraging failure to update the mAdminMap data structure...

PT-2018-4129

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.1 r1 Description The issue in Android might allow attackers to spoof device administrators, bypassing MDM restrictions. This is due to a failure to update the mAdminMap data structure. Recommendations For versions...

CVE-2015-9213

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD...

Buffer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

Buffer overflow

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD...

Code injection

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 43...

CVE-2014-10051

CVE-2014-10051 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 400, SD 410/12, SDX20). After loading a dynamically loaded code section, the I-Cache is not invalidated, allowi...

CVE-2014-10057

CVE-2014-10057 affects Android on Qualcomm Snapdragon platforms (various MDM and SD系列) where calibration files under data/misc/audio were stored with permissions 777 prior to the 2018-04-05 patch level. The root cause is overly broad file permissions (world-writable) on calibration data, which co...

CVE-2016-10438

In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD...

CVE-2016-10449

CVE-2016-10449 affects Android on Qualcomm Snapdragon devices (GNSS API) where, prior to the 2018-04-05 patch level, a NULL pointer dereference in GNSS API functions could occur. The issue is associated with Snapdragon Mobile and Wear platforms (e.g., MDM9206/9607/9640/9650, MSM8909W, SD 210–835 ...