RHEL 8 : ipa (RHSA-2021:2027)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2027 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based...

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability...

Important: idm:DL1 security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-3480 For more details about t...

ALSA-2021:1983 Important: idm:DL1 security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: slapi-nis: NULL dereference DoS with specially crafted Binding DN CVE-2021-3480 For more details about t...

slapi-nis 代码问题漏洞

slapi-nis is An open source application. NIS Server plug-in and Schema Compatibility plug-in for Red Hat Directory Server and 389 Directory Server. A security vulnerability exists in slapi-nis that stems from the use of NULL pointer dereferences when resolving bind DNs could allow an...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: OSV:GHSA-GR58-J5WH-M333...

GHSA-GR58-J5WH-M333 Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

Overview of the EU’s draft NIS 2 Directive

Anticipating stronger security requirements for critical EU sectors A pdf copy of this brief is available here. The EU Commission recently proposed a revision to its Directive on Security of Network and Information Systems NIS. The existing NIS Directive “NIS 1” requires EU Member States to enact...

EFB Tampering 2. Device Integrity

TL;DR Electronic Flight Bag EFB integrity varies between different airlines and devices Aviation cyber security is becoming increasingly prominent with regulators EFBs often connect to unsecure networks including public Wi-Fi Security measures are not always effective and can be inconsistent Devi...

OpenSSL Vulnerabilities Mar 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to two vulnerabilities. A remote attacker may be able to cause denial of service through application crashes. An application may successfully validate an invalid X.509 certificate...

nis-it.co.uk Cross Site Scripting vulnerability OBB-1362287

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-7703

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

Design/Logic Flaw

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703 Prototype Pollution

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703

CVE-2020-7703 affects nis-utils. Vulnerability: Prototype Pollution via the setValue function in all versions up to 0.6.10. Root cause: unsafe handling of input in setValue enabling modification of Object.prototype. Impact: high to critical potential (as per CVSS in sources) including potential D...

Prototype Pollution

Overview nis-utils is a set of useful helpers Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const nisUtils = require'nis-utils'; nisUtils.object.setValue, 'proto.polluted', true; console.logpolluted; Details Prototype Pollution is a...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: SNYK:JS-NISUTILS-598799...

CVE-2020-7703: Improperly Controlled Modification of Object Prototype Attributes

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

PT-2020-19726 · Nis-Utils · Nis-Utils

Name of the Vulnerable Software and Affected Versions: nis-utils versions up to and including 0.6.10 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions of the package up to and including 0.6.10. Recommendations: For versions up to and includin...