2833 matches found
Security Bulletin: A vulnerability in subversion affects PowerKVM
Summary PowerKVM is affected by a vulnerability in Apache Subversion. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-9800 DESCRIPTION: Apache Subversion could allow a remote attacker to execute arbitrary commands on the system, caused by the connection to URLs...
Security Bulletin: Vulnerabilities in Subversion release shipped in Netcool/Impact (CVE-2013-1968)
Summary If you are using Subversion for version control in Netcool/Impact you may be affected by this vulnerability. Description is Subversion FSFS repositories can be corrupted by newline characters in filenames. More detail available at this link...
Security Bulletin: IBM QRadar Network Security is affected by vulnerability in subversion (CVE-2017-9800)
Summary IBM QRadar Network Security has addressed vulnerability in subversion. Vulnerability Details CVEID: CVE-2017-9800 DESCRIPTION: Apache Subversion could allow a remote attacker to execute arbitrary commands on the system, caused by the connection to URLs provided by the repository. By...
Supply-Chain Security
Earlier this month, the Pentagon stopped selling phones made by the Chinese companies ZTE and Huawei on military bases because they might be used to spy on their users. It's a legitimate fear, and perhaps a prudent action. But it's just one instance of the much larger issue of securing our supply...
Fedora 27 : composer (2018-9d1ff4b802)
Version 1.6.4 - 2018-04-13 - Security fixes in some edge case scenarios, recommended update for all users - Fixed regression in version guessing of path repositories - Fixed removing aliased packages from the repository, which might resolve some odd update bugs - Fixed updating of package URLs fo...
Fedora 26 : composer (2018-8b35c531db)
Version 1.6.4 - 2018-04-13 - Security fixes in some edge case scenarios, recommended update for all users - Fixed regression in version guessing of path repositories - Fixed removing aliased packages from the repository, which might resolve some odd update bugs - Fixed updating of package URLs fo...
CloudBees Jenkins Subversion Plugin Information Disclosure Vulnerability
CloudBees Jenkins Subversion Plugin is a U.S. CloudBees company based on Java development of continuous integration tools in the version control system plugin . A security vulnerability exists in the SubversionStatus.java and SubversionRepositoryStatus.java files in CloudBees Jenkins Subversion...
Information Disclosure Through Authorization Bypass
Jenkins Subversion Plugin is vulnerable to information disclosure through authorization bypass. The vulnerability allows users without Overall/Read permission to submit search queries to retrieve a list of user names and node names...
CVE-2018-1000111
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
Authorization
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
CVE-2018-1000111
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
CVE-2018-1000111
CVE-2018-1000111 affects the Jenkins Subversion Plugin (versions 2.10.2 and earlier). The root cause is improper authorization in SubversionStatus.java and SubversionRepositoryStatus.java, enabling an attacker with network access to obtain a list of nodes and users. The vulnerability enables info...
CVE-2018-1000111
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
CVE-2018-1000111
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
PT-2018-9290
Name of the Vulnerable Software and Affected Versions: Jenkins Subversion Plugin versions 2.10.2 and earlier Description: An improper authorization issue exists that allows an attacker with network access to obtain a list of nodes and users. This is due to a problem in SubversionStatus.java and...
CVE-2018-1000111: Incorrect Authorization
An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...
Disclosure of user names and node names to unauthorized users through post-commit hook URL in Subversion Plugin
The class handling unauthenticated Subversion post-commit hook notification requests at the /subversion/ path unnecessarily extended another type that handled requests to the …/search/ sub-path. This allowed submission of search queries to Jenkins, and getting a list of search results usually...
Debian: Security Advisory (DLA-1052-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability in the component of libsvn_fs_fs/fs_fs.c of the Subversion version control system allows a attacker to disclose protected information or cause service failures.
The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...
