The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to insufficient protection of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to rigid encoding of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

The vulnerability of the diagnostic command of the Plug-and-Play service for Cisco IOS XE allows a hacker to increase their privileges.

The vulnerability of the PnP service diagnostic command for Cisco IOS XE operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain privileged authentication tokens and enhance their privileges...

The vulnerability of Containerd’s execution environment, related to the lack of a mechanism for storing registration data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of Containerd’s execution environment is related to improper processing of the image manifest file. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Python Requests HTTP request library relates to the lack of a mechanism for storing registration data, allowing attackers to access confidential information.

The vulnerability of the Python Requests HTTP request library is related to the lack of a mechanism for storing registration data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the settings.cfg.viw configuration file of the device management application for Mikrotik RouterOS WinBox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the settings.cfg.viw configuration file of the device management application for Mikrotik RouterOS WinBox is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to...

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management tool and the Fortinet FortiAnalyzer event monitoring and analysis tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the CLI command-line interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker,...

The vulnerability of the Fortinet FortiClient for Windows security tool lies in the rigid encoding of registration data, which allows an intruder to gain unauthorized access to the protected information.

The vulnerability of the Fortinet FortiClient for Windows security tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...

The vulnerabilities of microprogrammed software in programmable logic controllers such as CompactLogix 1768, CompactLogix 1769, CompactLogix 5370, CompactLogix 5380, CompactLogix 5480, ControlLogix 5550, ControlLogix 5560, ControlLogix 5570, ControlLogix 5580, DriveLogix 5560, DriveLogix 5730, DriveLogix 1794-L34, Compact GuardLogix 5370, Compact GuardLogix 5380, GuardLogix 5570, GuardLogix 5580, and SoftLogix 5800 stem from insufficient protection of registration data. This allows attackers to elevate their privileges and alter the configuration of vulnerable devices.

The vulnerabilities of microprogrammed software in programmable logic controllers such as CompactLogix 1768, CompactLogix 1769, CompactLogix 5370, CompactLogix 5380, CompactLogix 5480, ControlLogix 5550, ControlLogix 5560, ControlLogix 5570, ControlLogix 5580, DriveLogix 5560, DriveLogix 5730,...

The vulnerability of the admin/executar_login.php component of the Mk-Auth authentication software allows a hacker to escalate their privileges.

The vulnerability of the admin/executarlogin.php component in the Mk-Auth authentication software is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the components of the audit log system for Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition (SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Emergency Responder, Cisco Message Exchange System Cisco Unity Connection, and the software for managing license issuance called Cisco Prime License Manager (PLM) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the components of the audit system for Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition SME, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Emergency Responder, Cisco Message Exchange Syst...

The vulnerability of the UDP service in D-Link DSL-2640B router software allows a hacker to gain access to administrative account information.

The vulnerability of the UDP CFM software-based router D-Link DSL-2640B lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to administrative credentials remotely...

PT-2021-4087 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 9.5 through 13.10.4 GitLab CE/EE versions 13.11 through 13.11.4 GitLab CE/EE versions 13.12 through 13.12.1 Description: The issue allows a high privilege user to obtain sensitive information from log files because the...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the insufficient protection of registration data, allowing attackers to access the protected information.

The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

Heightened Awareness for Iranian Cyber Activity

Iranian cyber threat actors have been continuously improving their offensive cyber capabilities. They continue to engage in more conventional offensive cyber activities ranging from website defacement, distributed denial of service DDoS attacks, and theft of personally identifiable information PI...

The vulnerability of the web interface of the IoT Field Network Director software management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IoT Field Network Director software management interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Intel QuickAssist Technology implementation lies in the insufficient protection of registration data, which allows attackers to enhance their privileges.

The vulnerability of the Intel QuickAssist Technology implementation is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel Endpoint Management Assistant cloud service lies in the insufficient protection of registration data, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the Intel Endpoint Management Assistant cloud service is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the client system in the VMware Horizon Client for Windows virtualization solution allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the client system of VMware Horizon Client for Windows in virtualized workstations is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to insufficient protection of registration data, allows a hacker to disclose protected information.

The vulnerability of the Red Hat OpenShift Container Platform is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...