3395 matches found
USN-2311-2: OpenStack Ceilometer vulnerability
USN-2311-1 fixed vulnerabilities in pyCADF. This update provides the corresponding updates for OpenStack Ceilometer. Original advisory details: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
Xxe
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
CVE-2014-4615
CVE-2014-4615 affects OpenStack components including PyCADF (0.5.0 and earlier), Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo. The issue allows remote authenticated users to read a message queue (v2/meters/http.reque...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
CVE-2014-4615: Exposure of Sensitive Information to an Unauthorized Actor
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
Important: Red Hat Security Advisory: openstack-ceilometer security and bug fix update
Updated OpenStack Telemetry packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which give...
PT-2014-6023
Name of the Vulnerable Software and Affected Versions OpenStack PyCADF version 0.5.0 and earlier Telemetry Ceilometer versions 2013.2 before 2013.2.4 and 2014.x before 2014.1.2 Neutron versions 2014.x before 2014.1.2 and Juno before Juno-2 Oslo affected versions not specified Description The issu...
CVE-2014-4615
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry Ceilometer 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain XAUTHTOKEN values by reading the message queue...
Microsoft Interflow Information-Sharing Platform Preview Open
Much like the Year of PKI that has never come to be, information sharing has been one of security’s more infamous non-starters. While successful in heavily siloed environments such as financial services, enterprises industry-wide are hesitant to share threat and security data for fear of losing a...
IBM WebSphere MQ 7.1 < 7.1.0.5 / 7.5 < 7.5.0.3 Multiple Vulnerabilities
The version of IBM WebSphere MQ server 7.1 / 7.5 installed on the remote Windows host is missing fix pack 7.1.0.5 / 7.5.0.3 or later. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists due to a failure to sanitize user-supplied input in...
CVE-2014-0923
IBM MessageSight 1.0 and 1.1 are affected by CVE-2014-0923. The issue is triggered by crafted MQTT authentication data, causing the MessageSight daemon to restart (Denial of Service) due to vulnerability in the MQTT handling path. IBM's remediation is to upgrade to firmware 1.1.0.0-IBM-IMA-IT0101...
IBM WebSphere MQ Telemetry安全绕过漏洞
Bugtraq ID:65897 CVE ID:CVE-2013-4054 IBM WebSphere MQ Telemetry将WebSphere MQ提供的通用信息主干扩展到了大范围的远程遥感器、传动器和遥测设备。 IBM WebSphere MQ Telemetry不正确过滤用户提交的URL请求，允许远程攻击者利用漏洞绕过限制访问WebContent目录之外的文件内容。 0 IBM WebSphere MQ Telemetry 7.5 厂商补丁： IBM ----- IBM WebSphere MQ Telemetry 7.5.0.3已经修复该漏洞，建议用户下载更新：...
PT-2014-2734
Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ version 7.5 before 7.5.0.3 Description A directory traversal issue in WMQ Telemetry allows remote attackers to read arbitrary files by using a crafted URI. Recommendations For IBM WebSphere MQ version 7.5 before 7.5.0.3, updat...
CVE-2013-4054: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI...
Microsoft Expands MAPP Program to Incident Response Teams
Microsoft is expanding its MAPP program that shares attack and protection information with other security vendors and will now be sharing some data with incident responders, as well. The new system will enable organizations such as CERTs and internal IR teams to exchange information on specific...
