CVE-2017-2664

CloudForms Management Engine (cfme) is affected by CVE-2017-2664. The issue is a lack of RBAC controls on certain methods in the Rails application, enabling privilege escalation for an attacker with access. Affected versions are cfme before 5.7.3 and 5.8.x before 5.8.1. Red Hat advisories RHSA-20...

PT-2018-7167

Name of the Vulnerable Software and Affected Versions: CloudForms Management Engine cfme versions prior to 5.7.3 CloudForms Management Engine cfme versions 5.8.x prior to 5.8.1 Description: The issue is related to a lack of Role-Based Access Control RBAC controls on certain methods within the rai...

CVE-2018-0293

A vulnerability in role-based access control RBAC for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is d...

CVE-2018-0293

CVE-2018-0293 affects Cisco NX-OS Software RBAC: a privilege-assignment flaw in CLI commands grants nonadministrative users the ability to run restricted commands on multiple Nexus/NX-OS platforms (MDS 9000, Nexus 2000/3000/3500/3600/5500/5600/6000/7000/7700 series, NX-OS standalone NX-OS mode, N...

CVE-2018-0293: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in role-based access control RBAC for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is d...

Cisco Prime File Upload Servlet Remote Code Execution (CVE-2018-0258)

A remote code execution vulnerability has been reported in Cisco Prime File Upload Servlet. This is due to improper input validation of the parameters in the HTTP request and a processing error in the role-based access control RBAC of URLs. A remote attacker could exploit this vulnerability by...

PT-2018-9698

Name of the Vulnerable Software and Affected Versions: XYHCMS version 3.5 Description: An issue was discovered that allows CSRF via an "index.php?g=Manage&m=Rbac&a=addUser" request, resulting in the addition of an account with the administrator role. Recommendations: For XYHCMS version 3.5,...

CVE-2018-10127: Cross-Site Request Forgery (CSRF)

An issue was discovered in XYHCMS 3.5. It has CSRF via an index.php?g=Manage&m=Rbac&a=addUser request, resulting in addition of an account with the administrator role...

UPDATE: Sysdig Falco v0.9.0

PenTestIT RSS Feed My last post from a almost nice months ago, was about an open source behavorial activity monitor which has container support. It was updated and we now have update – the Sysdig Falco v0.9.0! This release fixes a couple of driver and OSX build incompatibility issues. What is...

YxtCMF Cross-Site Request Forgery Vulnerability

YxtCMF is an online learning system. The system has functions such as online live broadcast, online question and answer, teacher management and forum. A cross-site request forgery vulnerability exists in the RbacController.class.php file in YxtCMF version 3.1. A remote attacker can exploit this...

Puppet Enterprise Incorrect Credential Management Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. A security vulnerability exists in...

Puppet Enterprise < 2016.4.4 / 2017 < 2017.2.1 Multiple Vulnerabilities

Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 are prone to multiple vulnerabilities. This VT has duplicated the existing VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2017-2297

Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens...

CVE-2017-2297

Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens...

CVE-2017-2296

CVE-2017-2296 affects Puppet Enterprise 2017.1.x and 2017.2.1. The vulnerability is a denial-of-service caused by processing specially formatted strings used as Classifier node group names or RBAC role display names, which triggers errors in the service. A fix was released in Puppet Enterprise 20...

CVE-2017-2296

In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2...

CVE-2017-2297

Puppet Enterprise is affected by CVE-2017-2297. Affected products: Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1. Root cause: the system did not properly authenticate a user before returning a labeled RBAC access token. Impact: this can allow an unauthenticated bypass of authenticatio...

CVE-2017-2297

Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens...

PT-2018-7109

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions prior to 2016.4.5 Puppet Enterprise versions prior to 2017.2.1 Description: The issue concerns incorrect user authentication before returning labeled RBAC access tokens. This problem affects users with labeled token...

CVE-2017-2297: Improper Authentication

Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled RBAC access tokens. This issue has been fixed in Puppet Enterprise 2016.4.5 and 2017.2.1. This only affects users with labeled tokens, which is not the default for tokens...