1450 matches found
CVE-2020-2286: Undefined Security Weakness
Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration...
Improper authorization due to caching in role-strategy
role-strategy 2.12 and newer uses a cache to speed up permission lookups. In role-strategy 3.0 and earlier this cache is not invalidated properly when an administrator changes the permission configuration. This can result in permissions being granted long after the configuration was changed to no...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
AMD Radeon Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48405 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-12911 Summary Description: AMD reported a potential vulnerability in AMD Radeon graphics drivers that could result in denial of service. Mitigation...
NVIDIA GPU Display Driver - September 2020 Security Bulletin - Lenovo Support US
Lenovo Security Advisory: LEN-47663 Potential Impact: Denial of service, code execution, privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-5979 , CVE-2020-5980, CVE-2020-5981, CVE-2020-5981 , CVE-2020-5982, CVE-2020-5983,...
System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US
No description provided...
System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US
Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...
Cross-site Scripting (XSS)
jenkins is vulnerable to cross-site scripting XSS. The vulnerability exists through the project naming strategy...
jenkins: stored XSS vulnerability in project naming strategy
A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. The project naming strategy description, displayed on item creation, is not properly escaped. This can result in a stored cross-site scripting XSS vulnerability exploitable by users with Overall/Manage permissions. The highes...
jenkins: stored XSS vulnerability in project naming strategy
A flaw was found in Jenkins in versions prior to 2.251 and LTS 2.235.3. The project naming strategy description, displayed on item creation, is not properly escaped. This can result in a stored cross-site scripting XSS vulnerability exploitable by users with Overall/Manage permissions. The highes...
A Patient Dies After Ransomware Attack Paralyzes German Hospital Systems
German authorities last week disclosed that a ransomware attack on the University Hospital of Düsseldorf UKD caused a failure of IT systems, resulting in the death of a woman who had to be sent to another hospital that was 20 miles away. The incident marks the first recorded casualty as a...
Rethinking Defensive Strategy at the Edge, Part 3: Strategies for Protective Action
Our three-part blog series, Re-thinking Defensive Strategy at the Edge, has been focusing on outlining a new defensive edge strategy for today's enterprise. We began with a discussion of data and indicators. Most recently, our second post focused on using risk signals and correlating them for...
Rethinking Defensive Strategy at the Edge, Part 2: Risk Signals as Security Controls
In the first post in our blog series Rethinking Defensive Strategy at the Edge, we began to outline why a new defensive edge strategy is needed for today's enterprise. As previously mentioned, the strategy enhances those in place and introduces another layer of defense that includes the following...
A "DFUR-ent" Perspective on Threat Modeling and Application Log Forensic Analysis
Many organizations operating in e-commerce, hospitality, healthcare, managed services, and other service industries rely on web applications. And buried within the application logs may be the potential discovery of fraudulent use and/or compromise! But, let's face it, finding evil in application...
AMD Radeon DirectX 11 Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-42153 Potential Impact: Code execution Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-6100, CVE-2020-6101, CVE-2020-6102, CVE-2020-6103 Summary Description: AMD reported potential vulnerabilities in a specific virtual machine VM configuration...
AMD Radeon DirectX 11 Driver Vulnerabilities - Lenovo Support US
No description provided...