KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2

KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serv...

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012

KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...

May 19, 2022—KB5015019 (OS Build 14393.5127) Out-of-band

None None...

May 19, 2022—KB5015018 (OS Build 17763.2931) Out-of-band

None None...

KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2

KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serve...

May 10, 2022—KB5013963 (OS Build 10240.19297) - EXPIRED

None None...

May 10, 2022—KB5013952 (OS Build 14393.5125) - EXPIRED

None None...

PT-2021-19541 · Mcafee · Mcafee Agent For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Agent for Windows versions prior to 5.7.3 Description: The issue is related to improper privilege management, allowing a local user to modify event information in the MA event folder. This enables the user to add false events or remove...

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K51220077)

The BIG-IP APM Edge Clientcomponent loads the policy library with user permission and bypassing the endpoint checks. CVE-2018-15316 Impact A malicious user can exploit this vulnerability on the APM Edge Clientby injecting a library file which will be loaded by the policy server and bypass the...

Cloud Foundry CF Networking SQL Injection Vulnerability

Cloud Foundry CF Networking Release is a program from the U.S.-based Cloud Foundry Foundation that provides policy-based container networking for Cloud Foundry. A SQL injection vulnerability exists in the internal api endpoint in Cloud Foundry CF Networking Release 2.16.0 prior to 2.11.0, which c...

CVE-2018-15755

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server...

CVE-2018-15755

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server...

CVE-2018-15755

CVE-2018-15755 affects Cloud Foundry CF Networking Release (versions prior to 2.16.0, specifically 2.11.0–2.15.0). The internal API endpoint between Diego cells and the policy server is vulnerable to SQL injection. A remote attacker with mTLS certificates and valid authentication can issue arbitr...

CVE-2018-15755 CF networking internal policy server SQL injection

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to the policy server...

CVE-2018-5546

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of...

Gemalto SafeNet Authentication Service for NPS Agent Elevation of Privilege Vulnerability

Gemalto SafeNet Authentication Service for NPS Agent is a network access policy agent from Gemalto USA. A security vulnerability exists in Gemalto SafeNet Authentication Service for NPS Agent due to the program's use of weak access control lists for installation directories and executable modules...

Quest Privilege Manager pmmasterd Buffer Overflow Exploit

This Metasploit modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege...

Quest Privilege Manager for Unix Buffer Overflow Vulnerability

Quest One Identity Privilege Manager for Unix is a comprehensive solution for user privilege management for Unix. A buffer overflow vulnerability exists in Quest One Identity Privilege Manager for Unix versions prior to 6.0.0.061. A remote attacker can exploit this vulnerability to gain full acce...

CVE-2017-6553

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACTALERTEVENT request that causes memory corruption in the pmmasterd daemon...

CVE-2017-6553

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACTALERTEVENT request that causes memory corruption in the pmmasterd daemon...