Security feature bypass

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352...

CVE-2023-35898 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352...

CVE-2023-35898

IBM InfoSphere Information Server 11.7 contains an information disclosure vulnerability in the Data Flow Designer component (DataStage Flow Designer) caused by an insecure security configuration. An authenticated user could obtain sensitive information due to this misconfiguration. Remediation pe...

The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Office suite is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2023-35898)

Summary DataStage Flow Designer is an internal component of IBM InfoSphere Information Server. An information disclosure vulnerability in the DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2023-35898 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticat...

The vulnerability of the Mozilla Firefox browser on Windows operating systems, related to security configuration errors, allows attackers to access confidential information.

The vulnerability of the Mozilla Firefox browser on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information using a created .scf script...

CVE-2023-23468

CVE-2023-23468 affects IBM Robotic Process Automation for Cloud Pak versions 21.0.1–21.0.7.3 and 23.0.0–23.0.3. The root cause is an insufficient security configuration that may allow creation of namespaces within a cluster. Impact is confined to cluster namespace creation without other confident...

CVE-2023-23468 IBM Robotic Process Automation for Cloud Pak access control

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500...

PT-2023-5440 · Ibm · Ibm Robotic Process Automation For Cloud Pak

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation for Cloud Pak versions 21.0.1 through 21.0.7.3 IBM Robotic Process Automation for Cloud Pak versions 23.0.0 through 23.0.3 Description: The issue is related to insufficient security configuration, which may allo...

Security Bulletin: IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration (CVE-2023-23468).

Summary IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster CVE-2023-23468. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details...

DEBIAN-CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

UBUNTU-CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

Design/Logic Flaw

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

The vulnerability of the Windows Server operating system allows a perpetrator to bypass access control for RPC procedures.

The vulnerability of Windows Server operating system services is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access control procedures for RPC calls using a specially created script...

The vulnerability of the Windows SMB Witness service allows a hacker to bypass access control procedures for RPC processes.

The vulnerability of the Windows SMB Witness service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass access checks for RPC procedures using a specially created script...

CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section...

Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created link...

The vulnerability of the Schema Handler component in the PostgreSQL database management system allows attackers to circumvent security restrictions.

The vulnerability of the Schema Handler component in the PostgreSQL database management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...