io.micronaut.configuration:micronaut-security-ldap (>=1.2.0, <=1.2.2), io.micronaut.configuration:micronaut-security-oauth2 (>=1.2.0, <=1.2.2) +7 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.0)

io.micronaut:micronaut-http-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0,...

io.micronaut.configuration:micronaut-security-ldap (1.1.0.rc1), io.micronaut:micronaut-function-web (1.1.0.rc1) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.1.0.rc1)

io.micronaut:micronaut-http-server MAVEN version 1.1.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.1.0.rc1 -...

io.micronaut.configuration:micronaut-security-ldap (1.2.3), io.micronaut.configuration:micronaut-security-oauth2 (1.2.3) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.8)

io.micronaut:micronaut-http-server MAVEN version 1.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.2.3 -...

io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.aws:micronaut-function-aws-api-proxy (>=2.0.0.m1, <=2.0.0.m3) +3 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (2.0.0.m2)

io.micronaut:micronaut-http-server MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.aws:micronaut-aws-alexa-httpserver =2.0.0.m1, =2.0.0.m1, =2.0.0.m3 -...

io.micronaut.configuration:micronaut-security-ldap (1.0.5), io.micronaut:micronaut-function-web (1.0.5) +6 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.0.5)

io.micronaut:micronaut-http-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut.configuration:micronaut-security-ldap 1.0.5 -...

io.micronaut:micronaut-function-web (1.3.0.m1), io.micronaut:micronaut-http-server-netty (1.3.0.m1) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.3.0.m1)

io.micronaut:micronaut-http-server MAVEN version 1.3.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.3.0.m1 - io.micronaut:micronaut-http-server-netty...

io.micronaut:micronaut-function-web (1.2.2), io.micronaut:micronaut-http-server-netty (1.2.2) +1 more potentially affected by CVE-2024-23639 via io.micronaut:micronaut-http-server (1.2.2)

io.micronaut:micronaut-http-server MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-http-server and may be impacted: - io.micronaut:micronaut-function-web 1.2.2 - io.micronaut:micronaut-http-server-netty 1.2.2 ...

Oracle DB Broken PDB Isolation / Metadata Exposure

Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2, 12.2.0.1, 18c, 19c Tested Versions: 19c Risk Level: Medium Solution Status: Fixed CVE Reference: CVE-2021-2173 Author of Advisory: Emad Al-Mousa Overview:...

Oracle DB Broken PDB Isolation / Metadata Exposure Vulnerability

Proof of concept details for Oracle database versions 12.1.0.2, 12.2.0.1, 18c, and 19c that had a PDB isolation vulnerability allowing viewing of metadata for a different database within the same container. Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database...

Improper kubeconfig validation allows arbitrary code execution

Flux2 can reconcile the state of a remote cluster when provided with a kubeconfig with the correct access rights. Kubeconfig files can define commands to be executed to generate on-demand authentication tokens. A malicious user with write access to a Flux source or direct access to the target...

PT-2022-16897

Name of the Vulnerable Software and Affected Versions Flux2 versions 0.1.0 through 0.29.0 helm-controller versions 0.1.0 through 0.19.0 kustomize-controller versions 0.1.0 through 0.23.0 Description The issue concerns code injection via malicious Kubeconfig files, potentially leading to privilege...

PT-2021-22798 · Primekey · Primekey Ejbca

Name of the Vulnerable Software and Affected Versions: PrimeKey EJBCA versions prior to 7.6.0 Description: An issue was discovered where the CMP RA Mode in PrimeKey EJBCA can be exploited by using a known client certificate to authenticate enrolling clients. The same RA client certificate is used...

CVE-2021-37586

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

Input validation

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

CVE-2021-37586

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

CVE-2021-37586

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

CVE-2021-37586

The CVE affects Mitel’s PowerPlay Web component in Mitel Interaction Recording Multitenancy systems prior to version 6.7. Affected component allows an Administrator to replay a previously recorded conversation from another tenant due to insufficient validation. No exploit details are provided in ...

PT-2021-21722

Name of the Vulnerable Software and Affected Versions Mitel Interaction Recording Multitenancy systems versions prior to 6.7 Description The issue allows a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation in the PowerPlay...

CVE-2021-37586: Improper Input Validation

The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user with Administrator rights to replay a previously recorded conversation of another tenant due to insufficient validation...

Mitel Interaction Recording Multitenancy 输入验证错误漏洞

Mitel Interaction Recording Multitenancy is an interactive call recording system from Mitel Canada. A security vulnerability exists in the PowerPlay Web component of the Mitel Interaction Recording Multitenancy system prior to 6.7, which arises from insufficient authentication and replay of a...