CVE-2019-11090

Cryptographic timing conditions in the subsystem for IntelR PTT before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45, 13.0.0 and 14.0.10; IntelR TXE 3.1.70 and 4.0.20; IntelR SPS before versions SPSE504.01.04.305.0, SPSSoC-X04.00.04.108.0, SPSSoC-A04.00.04.191.0, SPSE304.01.04.086.0,...

duplicity trust management issue vulnerability

duplicity is a Linux-based file compression and backup utility. A trust management issue vulnerability exists in duplicity version 0.6.24. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can exploit default passwords o...

mcollective Trust Management Issues Vulnerabilities

mcollective is a framework for building Server Orchestration and parallel work execution systems. A trust management issue vulnerability exists in mcollective. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker could...

Puppet Agent Trust Management Issue Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end program. A security vulnerability exists in...

CloudBees Jenkins Spira Importer Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Spira Importer Plugin is used in one of the SpiraPla...

Tautulli Cross-Site Request Forgery Vulnerability

Tautulli is an application for monitoring Plex Media Server media server. A cross-site request forgery vulnerability exists in Tautulli version 2.1.9. The vulnerability stems from the WEB application not adequately verifying that a request is coming from a trusted user. An attacker could use this...

CloudBees Jenkins WebSphere Deployer Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . WebSphere Deployer Plugin is used in which a...

CVE-2019-18826

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain...

CVE-2019-18826

Barco ClickShare Button R9861500D01 devices prior to 1.9.0 are affected by an improper certificate chain validation in the embedded dongle_bridge, which does not validate the entire certificate chain. This is documented across multiple sources (NVD/Red Hat/Nessus/CNVD) as a certificate-trust-chai...

Petwant PF-103 and Petalk AI Trust Management Issue Vulnerabilities

Petwant PF-103 is an automated pet feeder from Petwant Pet Products China.Petalk AI is an automated pet feeder with monitoring function. A trust management issue vulnerability exists in the Petwant PF-103 and Petalk AI version 3.2.2.30 using firmware version 4.3.2.50, which stems from the program...

The vulnerability of the Intel Platform Trust Technology (PTT) platform for storing account data and managing keys, along with the microsoftware Intel Trusted Execution Engine (TXE) and Intel Server Platform Services, arises from the lack of protection for operational data. This allows attackers to gain access to the cryptographic keys stored in the Trusted Platform Module (TPM).

The vulnerability of the Intel Platform Trust Technology-based data storage and key management platform, along with the Intel Trusted Execution Engine software and Intel Server Platform Services, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a...

Top 5 Cybersecurity Trends to Prepare for in 2020

I don’t need a crystal ball to predict that in 2020 cybersecurity attacks will accelerate and the tactics will evolve. We’ll continue to be hounded by greater volumes of the attacks that have threatened us for years and, as businesses adopt new innovations, new vulnerabilities to threats will...

Improve cyber supply chain risk management with Microsoft Azure

For years, Microsoft has tracked threat actors exploiting federal cyber supply chain vulnerabilities. Supply chain attacks target software developers, systems integrators, and technology companies. Tactics often include obtaining source code, build processes, or update mechanisms to compromise...

Guardicore Centra Integration now available on CyberArk Marketplace

Privileged Access Management is part of a zero-trust model. Guardicore strengthens its offering by integrating with CyberArk...

CVE-2019-9464

In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges...

Design/Logic Flaw

In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges...

CVE-2019-9464

CVE-2019-9464 is a targeted Elevation of Privilege vulnerability in the Android Framework affecting Android 10, caused by an incorrect warning about an app accessing the user’s location in RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java. This could undermine ...

CVE-2019-9464

In various functions of RecentLocationApps.java, DevicePolicyManagerService.java, and RecognitionService.java, there is an incorrect warning indicating an app accessed the user's location. This could dissolve the trust in the platform's permission system, with no additional execution privileges...

PT-2019-19672 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 10 Description: The issue concerns incorrect warnings about app access to user location in various functions, potentially dissolving trust in the platform's permission system. No additional execution privileges are needed, but...

Intel TXE and Intel Converged Security and Management Engine License Issue Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...