A Successful Self-Service Password Reset (SSPR) Project Requires User Adoption

IT help desks everywhere are having to adjust to the 'new normal' of supporting mainly remote workers. This is a major shift away from visiting desks across the office and helping ones with traditional IT support processes. Many reasons end-users may contact the helpdesk. However, password relate...

A Successful Self-Service Password Reset (SSPR) Project Requires User Adoption

IT help desks everywhere are having to adjust to the 'new normal' of supporting mainly remote workers. This is a major shift away from visiting desks across the office and helping ones with traditional IT support processes. Many reasons end-users may contact the helpdesk. However, password relate...

Support for Oracle Cloud VMware Solution (OCVS)

Support Statement Oracle Cloud VMware Solution OCVS allows you to create and manage VMware-enabled software-defined data centers SDDCs in Oracle Cloud Infrastructure. Oracle Cloud VMware Solution provides self-service provisioning with full administrative permissions, including root access,...

NCR SelfServ ATMs APTRA XFS Encryption Issue Vulnerability

NCR SelfServ ATMs is a self-service ATM machine device. A cryptographic issue vulnerability exists in NCR SelfServ ATMs APTRA XFS, which can be exploited by a remote attacker to sign arbitrary files and CAB archives used to update the BNA software, bypass the application whitelist, and execute...

CVE-2020-10126

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor BNA, enabling an attacker with physical access to internal ATM components to restart the host computer and execute arbitrary code with SYSTEM privileges because while booting, the...

CVE-2020-10125

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor BNA software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files...

CVE-2020-10124

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer, which could allow an attacker with physical access to the internal components of the ATM to execute arbitrary code, including code that enables the...

The vulnerability of the Self-Service component of the Oracle PeopleSoft Enterprise CS Campus Community application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Self-Service component of the Oracle PeopleSoft Enterprise CS Campus Community application is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

How to force Self Service to Refresh Start Menu Apps / Desktop Shortcuts on logon

Allow the users to have the latest Apps upon logon and not having to wait for a timed Refresh to occur...

Oracle PeopleSoft Products PeopleSoft Enterprise CS Campus Community Unauthorized Access Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. A security vulnerability exists in the Self-Service component of...

Making it easier for your remote workforce to securely access all the apps they need, from anywhere

Since I published my last blog, Five identity priorities for 2020, COVID-19 has upended the way we work and socialize. Now that physical distancing has become essential to protect everyone’s health, more people than ever are going online to connect and get things done. As we all adjust to a new...

Harris Computer Ormed Self Service Information Disclosure Vulnerability

Harris Computer Ormed Self Service is a suite of self-service software from Harris Computer USA. An information disclosure vulnerability exists in Harris Computer Ormed Self Service versions prior to 2019.1.4. An attacker can exploit this vulnerability by sending an arbitrary 'empNo' parameter...

CVE-2019-18626

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social...

Code injection

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social...

CVE-2019-18626

Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W2Service.svc/RetrieveW2EntriesForEmployee URI, thus exposing sensitive information including employee tax information, social...

CVE-2019-18626

Affected product: Harris Ormed Self Service, prior to 2019.1.4. Vulnerability core: authenticated users can supply an arbitrary empNo to the URI RetrieveW2EntriesForEmployee under ORMEDMIS/Data/PY/T4W2Service.svc/ RetrieveW2EntriesForEmployee, leading to disclosure of W-2 forms and sensitive data...

March 2020 -- What's New in Security, Part 2

Welcome to Akamai's March 2020 Release. As we covered yesterday, this release offers a week of product updates, with each day highlighting continued innovations across a different area of Akamai's portfolio: Monday and Tuesday feature two days of security updates. There's a lot going on in Akamai...

CVE-2019-4301

BigFix Self-Service Application SSA is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML...

CVE-2019-4301

BigFix Self-Service Application SSA is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML...

CVE-2019-4301

CVE-2019-4301 affects the BigFix Self-Service Application (SSA). The issue allows arbitrary code execution triggered by Javascript embedded in Running Message or Post Message HTML. The vulnerability is documented with CVSSv3.1 base score 8.4 (HIGH) and CVSSv2 base score 6.0 (MEDIUM). Exploitation...