2291 matches found
Information disclosure
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2016-5935
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
CVE-2016-5935
CVE-2016-5935 relates to IBM Jazz for Service Management via IBM Dashboard Application Services Hub (DASH) 3.1.3 (part of JazzSM 1.1.3). The vulnerability arises from a lack of SSL certificate validation when connecting to remote datastores from the WebSphere Admin Console in federation scenarios...
CVE-2016-5935
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
PT-2017-8819
Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management affected versions not specified Description The issue is caused by the failure to properly validate the SSL certificate, allowing a remote attacker to obtain sensitive information. An attacker could exploit this...
CVE-2016-5935: Exposure of Sensitive Information to an Unauthorized Actor
IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...
Description of Update Rollup 2 for System Center 2012 R2 Orchestrator and Service Management Automation
Description of Update Rollup 2 for System Center 2012 R2 Orchestrator and Service Management Automation Summary This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Orchestrator and Service Management Automation SMA. Additionally, this article...
HP Business Service Management Remote Code Execution Vulnerability
HPE Business Service Management BSM is a suite of integrated end-to-end management solutions for network, server, application and business transaction monitoring from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HP Business Service Management, which could be...
systemd: Assertion failure when PID 1 receives a zero-length message over notify socket
A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd freeze its execution, preventing further management of system services, system shutdown, or zombie process collection via systemd...
HP Business Service Management Cross-Site Scripting Vulnerability
HP Business Service Management Business Service Management software that dynamically connects IT services to the underlying IT infrastructure with a business focus. A cross-site scripting vulnerability exists in HP Business Service Management. An attacker could exploit this issue to execute...
Novell Service Desk Remote Version Detection
Detection of installed version of Novell Service Desk. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
SysAid Help Desk Detection (HTTP)
HTTP based detection of the SysAid Help Desk Software. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
BMC Footprints Service Core 11.5 - Multiple Cross Site Scripting Vulnerabilities (XSS)
About the Product: BMC FootPrints Service Core is an IT service and asset management platform used by many organizations to help the IT departments deliver more value to businesses. Advisory Details: During a Penetration testing, Help AG auditor Ayman Abdelaziz discovered the following: 1 Stored...
Hewlett-Packard UCMDB 10.10 JMX-Console Authentication Bypass
Mogwai Security Advisory MSA-2015-02 ---------------------------------------------------------------------- Title: Hewlett-Packard UCMDB - JMX-Console Authentication Bypass CVE-ID: CVE-2014-7883 Product: Hewlett-Packard Universal CMDB UCMDB Affected versions: UCMDB 10.10 Other versions might also...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:1638-1)
This openjdk update fixes the following security and non security issues : - Upgrade to 2.4.8 bnc887530 - Changed back from gzipped tarball to xz - Changed the keyring file to add Andrew John Hughes that signed the icedtea package - Change ZERO to AARCH64 tarball - Removed patches : -...
CA Cloud Service Management multiple security vulnerabilities
Replay-атаки, XSS, XXE, token validation vulnerability...
CVE-2014-8471
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors...
CVE-2014-8474
CA Cloud Service Management CSM before Summer 2014 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference...
CVE-2014-8473
Cross-site request forgery CSRF vulnerability in CA Cloud Service Management CSM before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8472
CA Cloud Service Management CSM before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors...