Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.12 security, enhancement & bug fix update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.13.12 on Red Hat Enterprise Linux 9 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this...

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this...

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this...

CVE-2024-8287

Anbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS certificate provided to it by the Anbox Stream Agent. An attacker must be able to machine-in-the-middle the Anbox Stream Agent from within an internal network before they can attempt to take advantage of this...

CVE-2024-8287

CVE-2024-8287 affects Anbox Management Service (AMS) versions 1.17.0–1.23.0. AMS does not validate the TLS certificate from the Anbox Stream Agent, enabling potential MITM from within an internal network. CVSS v3.1 base score 7.5 (HIGH) across confidentiality, integrity, and availability impacts;...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.16.2 on Red Hat Enterprise Linux 9 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...

Anbox Management Service 安全漏洞

Anbox Management Service ams is a free and open source compatibility layer from Anbox Open Source. It is designed to port mobile applications and mobile games on Android to run on GNU/Linux distributions. A security vulnerability exists in Anbox Management Service versions 1.17.0 through 1.23.0,...

The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Windows Standards-Based Storage Management service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

PT-2024-38915 · Unknown · Anbox Stream Agent +1

Name of the Vulnerable Software and Affected Versions: Anbox Management Service versions 1.17.0 through 1.23.0 Description: The issue concerns the failure to validate the TLS certificate provided by the Anbox Stream Agent. This could be exploited by an attacker who can intercept the communication...

GO-2023-1898 HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary...

CVE-2024-42395

There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2024-42395

There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2024-42395 Unauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI Protocol

There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2024-42395

CVE-2024-42395 describes an unauthenticated remote code execution in the AP Certificate Management Service . Exploitation could allow an attacker to run arbitrary commands on the underlying OS, potentially leading to complete system compromise. The CVSS metrics indicate a network-based , no-authe...

PT-2024-29922

Name of the Vulnerable Software and Affected Versions AP Certificate Management Service affected versions not specified Description The issue concerns a vulnerability in the AP Certificate Management Service that could allow a threat actor to execute an unauthenticated RCE attack. Successful...

The vulnerability of the NetScaler Console delivery management service (formerly NetScaler ADM), related to authentication procedures that allow attackers to disclose protected information.

The vulnerability of the NetScaler Console delivery management service formerly NetScaler ADM is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Huawei 手机安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A privilege escalation vulnerability exists in Huawei...

CVE-2024-30083

Windows Standards-Based Storage Management Service Denial of Service Vulnerability...

Microsoft Windows Standards-Based Storage Management Service Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Standards-Based Storage Management Service. The following products and editions are affected:Windows Server 2019,Windows Server 2019...