Microsoft SharePoint Foundation and SharePoint Enterprise Server Elevation of Privilege Vulnerability

Microsoft SharePoint Foundation 2013 SP1 and SharePoint Enterprise Server 2016 are both products of Microsoft Corporation.Microsoft SharePoint Foundation 2013 SP1 is a set of Microsoft SharePoint Foundation 2013 SP1 is a Web-based collaboration platform for small organizations or departments, and...

Microsoft Sharepoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly verify tenant permissions. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who successfully exploited t...

How to deploy Veeam Service Provider Console Communication Agent in Unattended Mode

Challenge Some deployment scenarios may require that the Veeam Service Provider Console Communication Agent is deployed via Windows PowerShell in the silent mode. Solution Run Windows PowerShell as administrator and execute following command with correct values for Tenant's username in VACTENANT=...

AWS re:Invent 2017: Wallarm Delivers its AI-enabled NG-WAF and scanner to AWS Customers

We are thrilled to be sponsoring this year’s AWS re:INVENT in Las Vegas. With many of our customers using AWS infrastructure it is critical for us to provide a frictionless way to protect APIs, applications and micro-services in AWS environments. Filtering nodes for Wallarm’s NG-WAF with Active...

CVE-2017-5201

NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors, a different vulnerability than CVE-2016-3064...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2017-36367)

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP...

Design/Logic Flaw

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

CVE-2017-14105

HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore feature does not validate pathnames within the archive. An authenticated, local attacker - even restricted as a tenant - can add a jsp at...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

openstack-neutron: iptables not active after update

A race-condition flaw was discovered in openstack-neutron where, following a minor overcloud update, neutron security groups were disabled. Specifically, the following were reset to 0: net.bridge.bridge-nf-call-ip6tables and net.bridge.bridge-nf-call-iptables. The race was only triggered by an...

cfme: API leaks any MiqReportResult

A flaw was found in the CloudForms API. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access...

CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497

The dialog for creating cloud volumes cinder provider in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant...

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2

Network outage and performance degradation after you install WMF 5.1 in Windows Server 2012 R2 Symptoms Assume that you use a Hyper-V Network Virtualization HNV Gateway with Routing and Remote Access Service RRAS clusters on a Windows Server 2012 R2-based server. After you install Windows...

CFME: Dialog for creating cloud volumes does not filter cloud tenants CVE-2017-7497

The dialog for creating cloud volumes cinder provider in CloudForms does not filter cloud tenants by user. An attacker with the ability to create storage volumes could use this to create storage volumes for any other tenant...

cfme: API leaks any MiqReportResult

A flaw was found in the CloudForms API. A user with permissions to use the MiqReportResults capability within the API could potentially view data from other tenants or groups to which they should not have access...

Information Disclosure

github.com/openshift/origin is vulnerable to information disclosure. The vulnerability is possible because kubernetes watch cache does not return the correct data in a multi tenant environment, revealing the data of a user to another user...

Backup Copy Seeding and Mapping for Cloud Connect

Objective This article documents how to seed a Backup Copy job for use with a Cloud Repository from a Veeam Cloud Service Provider. Solution Critical Notes Starting with Veeam Backup & Replication v10, there are now two different backup copy modes: Immediate copy and Periodic copy. The mode used ...