CVE-2024-20381 Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator NSO and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the...

CVE-2024-20381

CVE-2024-20381 involves a JSON-RPC API authorization bypass in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD, used by web interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN routers. The root cause is improper authorization checks on the API, allowing an authenticate...

CVE-2024-20381 Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator NSO and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the...

Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability

A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator NSO and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the...

Cisco多款产品 安全漏洞

The Cisco RV340 and others are products of Cisco, Inc.The Cisco RV340 is a dual WAN Gigabit Vpn router.The Cisco Crosswork Network Services Orchestrator is a network automation and orchestration platform.The Cisco Optical Site Cisco Optical Site Manager is a network management software. A securit...

PT-2024-10394 · Cisco · Cisco Optical Site Manager +3

Name of the Vulnerable Software and Affected Versions: Cisco Crosswork Network Services Orchestrator NSO affected versions not specified Cisco ConfD affected versions not specified Cisco Optical Site Manager affected versions not specified Cisco RV340 Dual WAN Gigabit VPN Routers affected version...

ROS-20240910-05

Nomad application orchestrator vulnerability related to vulnerability to write outside of catalog distribution during migration. Exploitation of the vulnerability could allow an attacker acting remotely, to impact the confidentiality, integrity, and availability of the...

CVE-2024-42006

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...

CVE-2024-42006

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...

PT-2024-29685 · Keyfactor · Keyfactor Aws Orchestrator

Name of the Vulnerable Software and Affected Versions: Keyfactor AWS Orchestrator versions through 2.0 Description: The issue allows information disclosure. Recommendations: For versions through 2.0, update to a version that contains a fix for this issue. At the moment, there is no information...

CVE-2024-42006

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...

CVE-2024-42006

CVE-2024-42006 affects Keyfactor AWS Orchestrator up to version 2.0, with an information-disclosure vulnerability reported across multiple feeds. The Red/PRC sources corroborate an information disclosure issue but do not provide concrete exploit vectors or technical root-cause specifics in the su...

CVE-2024-42006

Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...

Keyfactor AWS Orchestrator 安全漏洞

Keyfactor AWS Orchestrator is an application from Keyfactor, Inc. supports certificate inventory and management in AWS Certificate Manager. A security vulnerability exists in Keyfactor AWS Orchestrator 2.0 and prior versions that stems from an information disclosure issue...

How to Export Console and HAR File

Purpose This article documents how to generate a HAR file HTTP Archive to provide additional diagnostic information when investigating issues for web-based applications e.g., Veeam Software Appliance, Veeam Backup & Replication Web UI, Veeam Service Provider Console, Veeam Recovery Orchestrator,...

IBM Aspera Orchestrator Cross-Site Request Forgery Vulnerability

IBM Aspera Orchestrator is a Web-based application from International Business Machines IBM, Inc. It can provide data-driven organizations with an efficient document processing pipeline. A cross-site request forgery vulnerability exists in IBM Aspera Orchestrator version 4.0.1. An attacker could...

IBM Aspera Orchestrator HTTP Header Injection Vulnerability

IBM Aspera Orchestrator is a Web-based application from International Business Machines IBM, Inc. It can provide data-driven organizations with an efficient document processing pipeline. An HTTP header injection vulnerability exists in IBM Aspera Orchestrator version 4.0.1, which can be exploited...

CVE-2023-38001

IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260206...

CVE-2023-38001

IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260206...

CVE-2023-26289

IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Forc...