9992 matches found
Unsupported license deployment alarm in Veeam Service Provider Console
Challenge Veeam Service Provider Console displays the alarm: Unsupported license deployment. Shared license key Copy The Alarm Description states: The same license ID has been detected for the backups servers: Copy Cause This alarm occurs when the same license is detected as having been installed...
PT-2021-18003
Name of the Vulnerable Software and Affected Versions: Shibboleth Service Provider versions prior to 3.2.1 Description: The issue allows content injection due to template generation using attacker-controlled parameters. This enables potential attackers to inject malicious content. Recommendations...
Managed Veeam Backup Agents are offline after Veeam Service Provider Console upgrade
Challenge After upgrading Veeam Service Provider Console, all Veeam Management Agents are listed as offline. Cause This may be caused by an incorrect security certificate configuration, which leads to the disconnection of the management agent on the Veeam Cloud Connect server after the upgrade. S...
Veeam Service Provider Console v5 Patch 2
This patch has been superseded by Veeam Service Provider Console v5 Patch 3. Requirements Please confirm you are running version5.0.0.6726 or later before installing Patch 2. You can check this by logging in to the backup portal and navigating to the Configuration Support Information tab. After...
CVE-2021-20440
IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider...
IBM API Connect 安全漏洞
IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. IBM API Connect suffers from a security vulnerability that allows an attacker to be able to use ...
CVE-2021-26864
Windows Virtual Registry Provider Elevation of Privilege Vulnerability...
CVE-2021-26864
Windows Virtual Registry Provider Elevation of Privilege Vulnerability...
Privilege escalation
Windows Virtual Registry Provider Elevation of Privilege Vulnerability...
CVE-2021-26864 Windows Virtual Registry Provider Elevation of Privilege Vulnerability
...
CVE-2021-21378 JWT authentication bypass with unknown issuer token
Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the allowmissing requirement under...
CVE-2021-26864: Undefined Security Weakness
Windows Virtual Registry Provider Elevation of Privilege Vulnerability...
CVE-2021-3034
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
CVE-2021-3034
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
CVE-2021-0376
In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
CVE-2021-0376
In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...
CVE-2021-3034: Insertion of Sensitive Information into Log File
An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on SSO integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the...
Envoy 授权问题漏洞
Envoy is an open source distributed proxy server. Envoy is vulnerable to an authorization issue, which could be exploited by an attacker to bypass authentication by providing a JWT token to an issuer that is not in the provider list...
