UBUNTU-CVE-2018-1305

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that...

foreman: Information leak through organizations and locations feature

foreman before version 1.15.0 is vulnerable to an information leak through organizations and locations feature. When a user is assigned no organizations/locations, they are able to view all resources instead of none mirroring an administrator's view. The user's actions are still limited by their...

Code injection

IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739...

PT-2017-12619

Name of the Vulnerable Software and Affected Versions IBM Security Guardium version 10.0 Description The issue is related to insufficient proof of an actor's identity, which can lead to exposure of resources or functionality to unintended actors. Recommendations For IBM Security Guardium version...

CVE-2017-1264: Improper Authentication

IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality to unintended actors. IBM X-Force ID: 124739...

CVE-2017-7490: Exposure of Resource to Wrong Sphere

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-6100: Exposure of Resource to Wrong Sphere

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP...

Enterprise: gears fail to properly isolate network traffic

It was found that OpenShift Enterprise 2.1 did not properly restrict access to services running on different gears. This could allow an attacker to access unprotected network resources running in another user's gear...