104 matches found
CVE-2024-41681: Inadequate Encryption Strength
A vulnerability has been identified in Location Intelligence family All versions V4.4. The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connectio...
PT-2020-18770
Name of the Vulnerable Software and Affected Versions BIG-IQ versions 5.2.0 through 7.0.0 Description The issue concerns the lack of secure high availability HA synchronization by TLS, potentially allowing on-path attackers to read or modify confidential data in transit. Recommendations For BIG-I...
CVE-2019-6475
Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had been looked up via traditional...
PT-2019-18108
Name of the Vulnerable Software and Affected Versions BIND versions 9.14.0 through 9.14.6 BIND versions 9.15.0 through 9.15.4 Description The issue arises from an error in the validity checks for incoming zone data in the mirror zone feature of BIND, allowing an on-path attacker to replace...