Product release: Virtuozzo Infrastructure Platform 3.5 Update 1 (3.5.1-43)

This update provides a new feature as well as fixes and improvements. Vulnerability id: VSTOR-30003 Unable to release node from cluster: 'Unable to send message to any node in ABGW cluster'. Vulnerability id: VSTOR-30135 No read/write data on dashboards if multipath is configured. Vulnerability i...

Harnessing the power of identity management (IDaaS) in the cloud

Sometimes, consumers have it easy. Take, for example, when they accidentally lock themselves out of their personal email. Their solution? Reset the password. With one click, they're able to change their old, complicated password with a new, more memorable one. Self-service password reset is aweso...

Making Container Deployment and Analysis Self-Service for Development

Team Riptide was tasked with creating an environment for our developers that removes operational burdens. We wanted to provide them with infrastructure, best practices, automation, and self-service tooling so that they could focus on innovation. The result is an internal system we call “Mosaic,”...

How We Streamlined Infrastructure and Tooling as a Service for Development

At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...

File Upload Vulnerability in TopCloud Self-service Website Building System

The top cloud station system is Chongqing Chujie Technology Co., Ltd. independent research and development "PC + cell phone + micro site + shopping" integration of the whole network marketing PHP enterprise intelligent station software. Peak cloud self-service website building system file upload...

SQL Injection Vulnerability in TopCloud Self-service Website Building System

The top cloud station system is Chongqing Chujie Technology Co., Ltd. independent research and development "PC + cell phone + micro site + shopping" integration of the whole network marketing PHP enterprise intelligent station software. TopCloud self-service website builder system SQL injection...

Micro Focus Self Service Password Reset Trust Management Issue Vulnerability

Micro Focus Self Service Password Reset is a web-based password management solution from Micro Focus UK. The product allows users to change their passwords using self-service. A trust management issue vulnerability exists in versions prior to Micro Focus Self Service Password Reset 4.4.0.4, which...

CVE-2019-11674

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack...

CVE-2019-11674

Man-in-the-middle vulnerability in Micro Focus Self Service Password Reset, affecting all versions prior to 4.4.0.4. The vulnerability could exploit invalid certificate validation and may result in a man-in-the-middle attack...

CVE-2019-11674

CVE-2019-11674 affects Micro Focus Self Service Password Reset prior to version 4.4.0.4. The issue is a certificate validation flaw enabling potential man-in-the-middle attacks. The description across connected records confirms the root cause as invalid certificate validation and implies exploita...

CVE-2019-11652

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

Authorization

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

CVE-2019-11652

CVE-2019-11652 affects Micro Focus Self Service Password Reset (SSPR). A potential authorization bypass vulnerability exists in SSPR versions prior to 4.4.0.3, 4.3.0.6, and 4.2.0.6. The remediation is to upgrade to SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate. The connected RH/CVE an...

Micro Focus NetIQ Self Service Password Reset Information Disclosure Vulnerability

Micro Focus NetIQ Self Service Password Reset is a web-based password management solution. An information disclosure vulnerability exists in Micro Focus NetIQ Self Service Password Reset versions prior to 4.4, which can be exploited by attackers to obtain sensitive information...

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

Cross site scripting

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

CVE-2019-11648

CVE-2019-11648 concerns information leakage in Micro Focus NetIQ Self Service Password Reset (SSPR). The vulnerability affects all versions prior to 4.4 and can expose sensitive information. In the provided data, the CVSS metrics show a CVSS v3 base score of 7.5 (HIGH) with network attack vector,...

CVE-2019-11647

A potential XSS exists in Self Service Password Reset, in Micro Focus NetIQ Software all versions prior to version 4.4. The vulnerability could be exploited to enable an XSS attack...

CVE-2019-11647

CVE-2019-11647 affects Micro Focus NetIQ Self Service Password Reset (web-based password management) prior to version 4.4. The connected CNVD entry confirms a cross-site scripting (XSS) vulnerability in this product, with the root cause described as a web-based XSS flaw that can be exploited to p...