Security Bulletin: Vulnerability in SSLv3 affects WebSphere Process Server, WebSphere Business Compass, WebSphere Business Modeler and WebSphere Business Modeler Publishing Server (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in WebSphere Process Server, WebSphere Business Compass, WebSphere Business Modeler, and WebSphere Business Modeler Publishing Server. Vulnerabili...

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER DLL Search Path Vulnerabilities

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER are all products of CELSYS Japan.CELSYS CLIP STUDIO PAINT is a set of tools for making comics and illustrations.CLIP STUDIO ACTION is a set of software for 3D animation. CLIP STUDIO MODELER is a 3D modeling plug-in. A security...

CVE-2018-0580

Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series CLIP STUDIO PAINT for Windows EX/PRO/DEBUT Ver.1.7.3 and earlier, CLIP STUDIO ACTION for Windows Ver.1.5.5 and earlier, with its timestamp prior to April 25, 2018, 12:11:31, and CLIP STUDIO MODELER for Windows Ver.1.6.3 and...

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

Security feature bypass

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

CVE-2013-6739

Summary: CVE-2013-6739 affects IBM SPSS Modeler prior to 16 on UNIX, where SSO tokens can bypass access restrictions. The IBM Security Bulletin (CVE-2013-6739) confirms the UNIX server accepts an SSO token to a session, potentially enabling authenticated access. Affected versions include 14–15.0 ...

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

CVE-2015-4991

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file...

CVE-2015-4991

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file...

Design/Logic Flaw

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file...

CVE-2015-4991

CVE-2015-4991 affects IBM SPSS Modeler (versions 14.2 FP3 IF027 and earlier; 15 FP3 IF015 and earlier; 16 FP2 IF012 and earlier; 17 FP1 IF018 and earlier; 17.1 IF008 and earlier). The issue: memory dumps contain plain text data, enabling a local attacker to read sensitive information. Impact is l...

CVE-2015-4991

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file...

Oracle: Security Advisory (ELSA-2007-0327)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3038

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

Design/Logic Flaw

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

CVE-2014-3038

CVE-2014-3038 affects IBM SPSS Modeler 16 on UNIX. The vulnerability arises when a spawned process retains root GID and privileged groups after authentication, allowing a local attacker to access files normally restricted to privileged users by leveraging (1) gid 0 or (2) root’s group memberships...

CVE-2014-3038

IBM SPSS Modeler 16.0 before 16.0.0.1 on UNIX does not properly drop group privileges, which allows local users to bypass intended file-access restrictions by leveraging 1 gid 0 or 2 root's group memberships...

Oracle Linux 5 : Important: / tomcat (ELSA-2007-0327)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0327 advisory. jakarta-commons-modeler-1.1-8jpp.1.0.2.el5 1.1-8jpp.1.0.2.el5 - rebuild after the fix for bug 238139 made it into the build root - Resolves: bug 238694...

CVE-2012-5769

IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service CPU and memory consumption, via an XML external entity declaration in conjunction with an entity...

CVE-2012-5769

IBM SPSS Modeler versions affected: 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2. The root cause is an XML External Entity (XXE) vulnerability in XML processing that could cause sensitive data exposure (reading local/remote files) and potentially trigger requests to intranet servers or a den...