Cross site request forgery (csrf)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

CVE-2016-9975 affects IBM Jazz for Service Management (1.1.2.1 and 1.1.3). The CSRF vulnerability could allow an attacker to perform unauthorized actions authenticated by a trusted user. Connected IBM advisories cite affected products and remediation: IBM Monitoring, IBM Application Diagnostics, ...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975: Cross-Site Request Forgery (CSRF)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

IBM Jazz for Service Management Information Disclosure Vulnerability

IBM Jazz for Service Management provides enhanced solutions in integrating service management and third-party offerings in key areas such as reporting, security, and administrative services. An information disclosure vulnerability exists in IBM Jazz for Service Management, which could be exploite...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

Information disclosure

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-5935

CVE-2016-5935 relates to IBM Jazz for Service Management via IBM Dashboard Application Services Hub (DASH) 3.1.3 (part of JazzSM 1.1.3). The vulnerability arises from a lack of SSL certificate validation when connecting to remote datastores from the WebSphere Admin Console in federation scenarios...

CVE-2016-5935: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

Description of Update Rollup 2 for System Center 2012 R2 Orchestrator and Service Management Automation

Description of Update Rollup 2 for System Center 2012 R2 Orchestrator and Service Management Automation Summary This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Orchestrator and Service Management Automation SMA. Additionally, this article...

HP Business Service Management Remote Code Execution Vulnerability

HPE Business Service Management BSM is a suite of integrated end-to-end management solutions for network, server, application and business transaction monitoring from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HP Business Service Management, which could be...

systemd: Assertion failure when PID 1 receives a zero-length message over notify socket

A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd freeze its execution, preventing further management of system services, system shutdown, or zombie process collection via systemd...

HP Business Service Management Cross-Site Scripting Vulnerability

HP Business Service Management Business Service Management software that dynamically connects IT services to the underlying IT infrastructure with a business focus. A cross-site scripting vulnerability exists in HP Business Service Management. An attacker could exploit this issue to execute...

Novell Service Desk Remote Version Detection

Detection of installed version of Novell Service Desk. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

SysAid Help Desk Detection (HTTP)

HTTP based detection of the SysAid Help Desk Software. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

BMC Footprints Service Core 11.5 - Multiple Cross Site Scripting Vulnerabilities (XSS)

About the Product: BMC FootPrints Service Core is an IT service and asset management platform used by many organizations to help the IT departments deliver more value to businesses. Advisory Details: During a Penetration testing, Help AG auditor Ayman Abdelaziz discovered the following: 1 Stored...

Hewlett-Packard UCMDB 10.10 JMX-Console Authentication Bypass

Mogwai Security Advisory MSA-2015-02 ---------------------------------------------------------------------- Title: Hewlett-Packard UCMDB - JMX-Console Authentication Bypass CVE-ID: CVE-2014-7883 Product: Hewlett-Packard Universal CMDB UCMDB Affected versions: UCMDB 10.10 Other versions might also...