CVE-2017-1746

IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...

Cross site request forgery (csrf)

IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...

Cross site request forgery (csrf)

IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140...

CVE-2017-1746

CVE-2017-1746 affects IBM Jazz for Service Management (JazzSM) version 1.1.3, vulnerable to Cross-Site Request Forgery (CSRF) that could enable malicious actions transmitted from a trusted user. Remediation is available: JazzSM 1.1.3 with Cumulative Patch Level 5 (1.1.3.0-TIV-JazzSM-DASH-Cumulati...

CVE-2017-1631

IBM Jazz for Service Management (JazzSM) 1.1.3 in Tivoli Netcool/OMNIbus WebGUI is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2017-1631). Affected: JazzSM v1.1.3; WebGUI 8.1.0 GA and FP. Root cause: CSRF in JazzSM; vulnerability allows an attacker to perform unauthorized a...

CVE-2017-1746

IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519...

CVE-2017-1631

IBM Jazz for Service Management IBM Tivoli Components 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133140...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34449)

The AR Series, SRG Series, and NetEngine16EX Services Routing Gateway are Huawei's all-in-one integrated services gateways for small and medium-sized branch offices and SMBs. Huawei SMC2.0 is a video service management platform. An out-of-bounds read vulnerability exists in multiple Huawei...

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

Vulnerability of the employment service management system of Beijing Rongzhi Chuangxiang Information Technology Co., Ltd. to override deletion

The Employment Service Management System is an information interaction system for students, companies, faculty counselors, the Career Center, and their employers. The Employment Service Management System of Beijing Rongzhi Chuangxiang Information Technology Co., Ltd. suffers from an override...

Cross-site Scripting Vulnerability in the Employment Service Management System of Beijing Rongzhi Chuangxiang Information Technology Co.

The Employment Service Management System is an information interaction system for students, companies, faculty counselors, the Career Center, and their employers. A cross-site scripting vulnerability exists in the Employment Service Management System of Beijing Rongzhi Chuangxiang Information...

SUSE-SU-2017:2212-1 Security update for openvswitch

This update for openvswitch fixes the following issues: - CVE-2017-9263: OpenFlow role status message can cause a call to abort leading to application crash bsc1041470 - CVE-2017-9265: Buffer over-read while parsing message could lead to crash or maybe arbitrary code execution bsc1041447 - Do not...

IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven

A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...

DevOps, Automation, Security and Compliance

Phew, the title of this post alone sounds like it could be quite a lot to deal with! So what is DevOps? DevOps is simply the blending of infrastructure operations processes and software development to enable faster changes to business applications/technology. These processes share a lot of ideolo...

IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability

IBM Jazz for Service Management provides enhanced solutions in integrating service management and third-party offerings in key areas such as reporting, security, and administrative services. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management 1.1.2.1 and 1.1.3,...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

Cross site request forgery (csrf)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

CVE-2016-9975 affects IBM Jazz for Service Management (1.1.2.1 and 1.1.3). The CSRF vulnerability could allow an attacker to perform unauthorized actions authenticated by a trusted user. Connected IBM advisories cite affected products and remediation: IBM Monitoring, IBM Application Diagnostics, ...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...