Information disclosure

In addOrUpdateNetworkInternal and related functions of WifiConfigManager.java, there is a possible man in the middle attack due to improper certificate validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for...

CVE-2020-2033 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie

When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on the same local area network segment with the ability to manipulate ARP or to conduct ARP spoofing...

CVE-2020-2033

Summary of CVE-2020-2033 Affected product: Palo Alto Networks GlobalProtect app (GlobalProtect Agent), specifically 5.0.x versions before 5.0.10 and 5.1.x versions before 5.1.4, when the pre-logon feature is enabled. Vulnerability and root cause: A missing certificate validation in the GlobalProt...

CVE-2020-0119

CVE-2020-0119 affects Android 10 and is caused by improper certificate validation in WifiConfigManager.java (addOrUpdateNetworkInternal and related functions), enabling a possible man-in-the-middle attack that could lead to remote information disclosure. Exploitation requires user interaction, an...

GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie

When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication cookie to a man-in-the-middle attacker on the same local area network segment with the ability to manipulate ARP or to conduct ARP spoofing...

Microsoft Visual Studio Code Information Disclosure Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. An information disclosure vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability to obtain a token by performing a man-in-the-middle attack...

GLSA-202006-01 : GnuTLS: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202006-01 GnuTLS: Information disclosure A flaw was reported in the TLS session ticket key construction in GnuTLS. Impact : A remote attacker could recover previous conversations in TLS 1.2 and obtain sensitive information or...

Security Advisory - Improper Authentication Vulnerability in Some Huawei Smartphones

There is an improper authentication vulnerability in some Huawei smartphones. Due to the identity of the message sender is not properly verified, an attacker can exploit this vulnerability through man-in-the-middle attack to induce user to access malicious URL. Vulnerability ID: HWPSIRT-2019-1213...

GnuTLS: Information disclosure

Background GnuTLS is an Open Source implementation of the TLS and SSL protocols. Description A flaw was reported in the TLS session ticket key construction in GnuTLS. Impact A remote attacker could recover previous conversations in TLS 1.2 and obtain sensitive information or conduct a...

Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.1.13 / 8.1.x < 8.1.13 / 9.0.x < 9.0.6 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.1.13 or 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability. - An authentication bypass by spoofing vulnerability exists in the authentication...

Debian DSA-4697-1 : gnutls28 - security update

A flaw was reported in the TLS session ticket key construction in GnuTLS, a library implementing the TLS and SSL protocols. The flaw caused the TLS server to not securely construct a session ticket encryption key considering the application supplied secret, allowing a man-in-the-middle attacker t...

[ASA-202006-4] thunderbird: multiple issues

Arch Linux Security Advisory ASA-202006-4 ========================================= Severity: High Date : 2020-06-06 CVE-ID : CVE-2020-12398 CVE-2020-12399 CVE-2020-12405 CVE-2020-12406 CVE-2020-12410 Package : thunderbird Type : multiple issues Remote : Yes Link :...

[ASA-202006-2] gnutls: man-in-the-middle

Arch Linux Security Advisory ASA-202006-2 ========================================= Severity: High Date : 2020-06-06 CVE-ID : CVE-2020-13777 Package : gnutls Type : man-in-the-middle Remote : Yes Link : https://security.archlinux.org/AVG-1177 Summary ======= The package gnutls before version...

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version 2.13.2. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender...

Man-in-the-Middle (MtiM)

github.com/weaveworks/weave is vulnerable to Man-in-the-Middle MtiM. IPv4 only clusters allows for MitM attacks via IPv6 rogue router advertisements if an attacker is able to run a process as root in a container and is able to respond to DNS requests from the host...

GnuTLS Encryption Problem Vulnerability (CNVD-2020-53541)

GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. A security vulnerability exists in GnuTLS version 3.6.14. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to bypass authentication in TLS version 1.3 and recover previou...

keycloak: missing signatures validation on CRL used to verify client certificates

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself CDP or through the separately configured path. The CRL are often availab...

Man-in-the-middle (MitM)

github.com/containernetworking/plugins is vulnerable to man-in-the-middle MitM. The attack is possible when rogue IPv6 router advertisements are sent to the host or other containers, causing the host to redirect part or all of the IPv6 traffic of the host to the attacker-controlled container...

Tigera Calico Information Disclosure Vulnerability

Tigera Calico is an open source cybersecurity solution for container, virtual machine, and host workloads from US-based Tigera. An information disclosure vulnerability exists in Tigera Calico 3.14.0 and earlier and Calico Enterprise 2.8.2 and earlier, which stems from a program that does not...

CVE-2020-13777

A flaw was found in GnuTLS, in versions starting from 3.6.4, where it does not session the ticket encryption key in a secure fashion by the application which is connecting. This flaw allows an attacker to craft a man-in-the-middle-attack, with the ability to bypass the TLS1.3 authentication and...