Security Bulletin: OpenSSL vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center)

Summary Multiple OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL, used by IBM Spectrum Control formerly Tivoli Storage Productivity Center, has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL has internal defaults for a directo...

DEBIAN-CVE-2021-44142

The Samba vfsfruit module uses extended file attributes EA, xattr to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfsfruit configured allow out-of-bounds heap read and wri...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

Design/Logic Flaw

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

CVE-2022-25318 affects Cerebrate up to version 1.4. The issue stems from an incorrect sharing group ACL that allows an unprivileged user to edit and modify sharing groups. Reported across multiple feeds, the vulnerability enables modification of sharing-group configuration by non-privileged users...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

PT-2022-17206 · Cerebrate · Cerebrate

Name of the Vulnerable Software and Affected Versions: Cerebrate versions through 1.4 Description: An issue was discovered that allowed an unprivileged user to edit and modify sharing groups due to an incorrect sharing group ACL. Recommendations: For versions through 1.4, as a temporary workaroun...

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

February 15, 2022—KB5010415 (OS Builds 19042.1566, 19043.1566, and 19044.1566) Preview

None None...

PeerTube Server-Side Request Forgery Vulnerability (CNVD-2022-18320)

PeerTube is a decentralized video sharing service platform. PeerTube suffers from a server-side request forgery vulnerability, which stems from the product's failure to determine that requests originate from trusted users, and can be exploited by attackers to send unintended requests to the serve...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

Authorization

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-24002

Samsung Link Sharing is affected by an improper authorization vulnerability (PreconditionActivity) that could allow an attacker to open a protected activity in versions prior to 12.4.00.3. The issue is documented across multiple sources (CVE-2022-24002, Red Hat, NVD, PRION, etc.). Affected produc...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

PT-2022-16404 · Unknown · Link Sharing

Name of the Vulnerable Software and Affected Versions: Link Sharing versions prior to 12.4.00.3 Description: The issue allows attackers to open protected activity via PreconditionActivity due to an improper authorization vulnerability in Link Sharing. Recommendations: For versions prior to...