Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Monitoring shipped with IBM Cloud Orchestrator Enterprise

Summary IBM Tivoli Monitoring is shipped as a component of IBM Cloud Orchestrator Enterprise. Information about security vulnerabilities affecting IBM Tivoli Monitoring has been published in the security bulletins below. Vulnerability Details Consult the following security bulletins for IBM Tivol...

Security Bulletin: IBM Tivoli Monitoring Soap Server (CVE-2016-6083)

Summary The default configuration for IBM Tivoli Monitoring soap interface allows unathenticated users access to soap requests. Vulnerability Details CVEID: CVE-2016-6083 DESCRIPTION: IBM Tivoli Monitoring could disclose could allow an unauthenticated user to access SOAP queries that could contai...

"XenDesktop Site is not reachable, check that the Citrix PVS Soap Server service user has XenDesktop permissions and network connectivity" While Promoting vDisk Version

The following error appears while trying to promote an updated version of a vDisk: "XenDesktop Site f0a65a14-f50b-403a-ba3b-77700c7829b7 is not reachable, check that the Citrix PVS Soap Server service user has XenDesktop permissions and network connectivity." The PVS Soap Server service runs as...

Adobe IndesignServer 5.5 SOAP Server Arbitrary Script Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Adobe IndesignServer 5.5 SOAP Server Arbitrary Script Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Adobe...

Design/Logic Flaw

The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

Sybase M-Business Anywhere (AvantGo) gsoap Module password Tag Handling Overflow

The Sybase M-Business Anywhere AvantGo software installed on the remote host includes a SOAP server that fails to validate an XML end tag in a SOAP request, resulting in a buffer overflow. An unauthenticated, remote attacker can exploit this to execute arbitrary code. This plugin checks the heap...

SOAP Server Detection

The remote host is running a SOAP server. SOAP, originally an acronym for 'Simple Object Access Protocol', is an XML-based distributed messaging protocol typically implemented over HTTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22477; scriptversion"1.16";...

Multiple vendor SOAP server (XML parser) denial of service (DTD parameter entities)

/////////////////////////////////////////////////////////////////////////////// //========================== Security Advisory ==========================// ///////////////////////////////////////////////////////////////////////////////...