system-storage-manager bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

system-storage-manager bug fix and enhancement update

An update is available for system-storage-manager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

Security Bulletin: Vulnerabilities in OpenSSL affect MegaRAID Storage Manager (CVE-2017-3735, CVE-2017-3736, CVE-2017-3737, CVE-2017-3738)

Summary MegaRAID Storage Manager has addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary MegaRAID Storage Manager has addressed the following vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2017-3735 Description: OpenSSL could allow a remote attacker to...

cPanel cross-site scripting vulnerability (CNVD-2019-34456)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the WHM SSL Storage Manager interface in versions of cPanel prior to 82.0.15. The...

CVE-2019-17379

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

Design/Logic Flaw

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

CVE-2019-17379

cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface SEC-527...

CVE-2019-17379

CVE-2019-17379 affects cPanel before 82.0.15, introducing a self-stored XSS in the WHM SSL Storage Manager interface. The underlying issue is lack of proper validation of client-side data in the web application, enabling an attacker to inject and execute script through stored input. Impact per so...

IBM Spectrum Protect 7.1.x < 7.1.9.300 / 8.1.x < 8.1.8 Multiple Vulnerabilities

IBM Spectrum Protect, formerly known as Tivoli Storage Manager, installed on the remote host is version 7.1.x 7.1.9.300 or 8.1.x 8.1.8. It is, therefore, affected by multiple IBM Db2 remote code execution and privilege escalation vulnerabilities. These vulnerabilities could allow an attacker to...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

CVE-2019-4140

IBM Tivoli Storage Manager Server IBM Spectrum Protect 7.1 and 8.1 could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336...

CVE-2019-4140

CVE-2019-4140 affects IBM Spectrum Protect Server (formerly IBM Tivoli Storage Manager) 7.1 and 8.1. The issue allows a local user to replace existing databases by restoring old data, potentially overwriting databases. Affected versions: 8.1.0.0–8.1.7.x and 7.1.0.0–7.1.9.200. Remediation: upgrade...

Security Bulletin: Stack-based buffer overflow and elevation of privileges vulnerabilities in IBM Spectrum Protect Server and Storage Agents (CVE-2019-4087, CVE-2019-4088)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server and Storage Agents are vulnerable to a stack-based buffer overflow and elevation of privileges. Vulnerability Details CVEID: CVE-2019-4087 DESCRIPTION: IBM Spectrum Protect Servers and Storage Agents are vulnerable to a...

Security Bulletin: Password disclosure in IBM Spectrum Protect Server (CVE-2019-4140)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server may disclose the database restore password when using the dsmserv restore db command. This could allow another user to perform a database restore or possibly result in an old backup replacing the database. Vulnerability Detai...

Security Bulletin: Cross-site scripting and privilege escalation vulnerabilities in WebSphere Application Server Liberty affect IBM Spectrum Protect Operations Center (CVE-2018-1767, CVE-2018-1901)

Summary IBM WebSphere Application Server Liberty is vulnerable to cross-site scripting and escalation of privileges which can affect IBM Spectrum Protect formerly Tivoli Storage Manager Operations Center. Vulnerability Details CVEID: CVE-2018-1767 DESCRIPTION: IBM WebSphere Application Server...

The vulnerability in the web interface of the Accelerated Storage Manager driver for the Rapid Storage Technology Enterprise storage technology implementation allows a perpetrator to cause a service failure.

The vulnerability in the web interface of the Accelerated Storage Manager driver for the Rapid Storage Technology Enterprise data storage technology exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability can allow a malicious actor to cause servi...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0130

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

Cross site scripting

Reflected XSS in web interface for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0130

Intel Rapid Storage Technology Enterprise (RSTe) includes the Intel Accelerated Storage Manager component. CVE-2019-0130 describes a reflected XSS in the web interface of this manager prior to version 5.5.0.2015, which may allow an unauthenticated attacker to potentially cause a denial of service...