Tenant authentication bypass in Zingbox Inspector

A security vulnerability exists in the Zingbox Inspector where authentication is not required when binding the Inspector instance to a different customer tenant. Ref: CVE-2019-15018 The vulnerability allows a user to bind the Zingbox Inspector to another tenant, which can impact the functionality...

You receive an error: "No tenant identifying information found in either the request or implied by any provided credentials" when integrated with Intune and Secure Hub is in use.

When enrolling in to Citrix Endpoint Management for MDM, if the deployment is integrated with Intune for MAM, you may experience the following error and behaviour. Without Secure Hub installed using Intune MAM only, then no problems are seen. When Secure Hub is installed and enrolled for MDM with...

EulerOS 2.0 SP8 : openldap (EulerOS-SA-2019-2087)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

SUSE SLED12 / SLES12 Security Update : openldap2 (SUSE-SU-2019:2390-1)

This update for openldap2 fixes the following issues : Security issues fixed : CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights ssf bsc1143194. CVE-2019-13057: Fixed rootDN of a backend that may proxyauth...

SUSE-SU-2019:2390-1 Security update for openldap2

This update for openldap2 fixes the following issues: Security issues fixed: - CVE-2019-13565: Fixed ssf memory reuse that leads to incorrect authorization of another connection, granting excess connection rights ssf bsc1143194. - CVE-2019-13057: Fixed rootDN of a backend that may proxyauth...

EulerOS Virtualization for ARM 64 3.0.2.0 : openldap (EulerOS-SA-2019-1939)

According to the version of the openldap packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN databas...

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

UBUNTU-CVE-2019-15753

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...

CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

Sql injection

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-15557

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

PT-2019-14273

Name of the Vulnerable Software and Affected Versions XM^online 2 User Account and Authentication server version 1.0.0 Description The issue allows SQL injection via a tenant key. This means an attacker could potentially inject malicious SQL code using the tenant key to access or manipulate...

CVE-2019-15557: Improper Neutralization of Special Elements used in an SQL Command

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key...

CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

ALPINE-CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

DEBIAN-CVE-2019-13057

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

Authorization

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...

CVE-2019-13057: Undefined Security Weakness

An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for certain databases but wants to maintain isolation e.g., for multi-tenant deployments, slapd does not properly stop a rootDN from requesting authorization a...