Intel TXE and Intel Converged Security and Management Engine License Issue Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Certificate chain no longer works correctly on Endpoint Management Server, devices fail to connect

You may notice that a certificate is soon to expire on Endpoint Management Server. After obtaining a new certificate, devices no longer connect. Inspecting the logs on the client show that there is now a certificate trust error, even though the new certificate is valid...

NetApp Clustered Data ONTAP Trust Management Issue Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. A trust management issue vulnerability exists in NetApp Clustered Data ONTAP 9.0 and later versions, which arises from the lack of an effective trust management mechanism in a...

Competitive conditions issue vulnerability for multiple Intel products

Intel Server Platform Services SPS, etc. are products of Intel Corporation. Intel Server Platform Services is a server platform service program. Intel TXE is a trust execution engine used in CPUs central processing units with hardware authentication capabilities. Intel Platform Trust Technology P...

EulerOS 2.0 SP2 : bind (EulerOS-SA-2019-2453)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - To provide fine-grained controls over the ability to use Dynamic DNS DDNS to update records in a zone, BIND 9 provides a feature called...

EulerOS Virtualization for ARM 64 3.0.3.0 : bind (EulerOS-SA-2019-2321)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date,...

Microsoft OAuth Flaw Opens Azure Accounts to Takeover

A vulnerability in the way Microsoft applications use OAuth for third-party authentication could allow an attacker to take over Azure cloud accounts. OAuth is a protocol that allows app users to share data about their accounts with third-party websites or apps, so that when they sign into the app...

systemd Trust Management Issues Vulnerability (CNVD-2020-46821)

systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A trust management issue vulnerability exists in...

MGASA-2019-0348 Updated gnupg2 packages fix security vulnerability

gnupg2 is updated to 2.2.18 and fix security vulnerability: Web of Trust forgeries using collisions in SHA-1 signatures CVE-2019-14855 Note that this change removes all SHA-1 based key signature newer than 2019-01-19 from the web-of-trust. This includes all key signature created with dsa1024 keys...

Sextortion scammers getting creative

We've covered sextortion before, focusing in on how the core of the threat is an exercise in trust. The threat actor behind the campaign will use whatever information available on the target that causes them to trust that the threat actor does indeed have incriminating information on them. They...

Fortinet FortiOS and Fortinet FortiClient Trust Management Issues Vulnerability

Fortinet FortiOS and Fortinet FortiClient are both products of the U.S. company Fita Fortinet.Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and...

Juniper Networks Junos OS Trust Management Issue Vulnerability

Juniper Networks SRX Series is a set of SRX Series service gateway appliances from Juniper Networks, U.S.A. Junos OS is a network operating system dedicated to the company's hardware devices. A vulnerability exists in Juniper Networks SRX Series in which Junos OS is vulnerable to a trust manageme...

November 19, 2019—KB4525252 (Preview of Monthly Rollup)

None None...

JetBrains TeamCity Trust Management Issue Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity is vulnerable to a trust...

Broadcom Brocade SANnav Trust Management Issues Vulnerability (CNVD-2019-41467)

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0, which stems from the program's use of hard-coded passwords. A local attacker could exploit this vulnerability to access...

Unspecified Vulnerability in Intel Converged Security and Management Engine (CNVD-2019-42599)

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Intel Converged Security and Management Engine Information Disclosure Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-16068)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

Intel Converged Security and Management Engine and Intel TXE Buffer Overflow Vulnerability

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Security at the Edge - What is Gartner's SASE & why does it matter?

Recently, Gartner published a report called "Market Trends: How to Win as WAN Edge and Security Converge Into the Secure Access Service Edge" that dives into how to enable security and network access controls as-a-service from the cloud. But what is Gartner's SASE pronounced like "sassy"? The...