Apache Traffic Control 安全漏洞

Apache Traffic Control is the United States Apache Apache Foundation's set of distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. A security vulnerability exists in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0,...

Denial of Service Vulnerability in MM2-4TX2

Applications for Hirschmann switches include office communications, production automation, process control, traffic control, as well as stand-alone machine and equipment control systems. A denial of service vulnerability exists in MM2-4TX2, which can be exploited by attackers to cause a denial of...

Selea CarPlateServer (CPS) 4.0.1.6 - Local Privilege Escalation Vulnerability

Exploit Title: Selea CarPlateServer CPS 4.0.1.6 - Local Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea CarPlateServer CPS v4.0.1.6 Local Privilege Escalation Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: 4.0.1.6210120...

Selea CarPlateServer 4.0.1.6 Local Privilege Escalation

Selea CarPlateServer CPS v4.0.1.6 Local Privilege Escalation Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: 4.0.1.6210120 4.013201105 3.100200225 3.005191206 3.005191112 Summary: Our CPS Car Plate Server software is an advanced solution that can be installed on...

Fingerprint authentication loophole exists in Traffic Control 12321 APP (ios version)

Traffic control 12123 is the official client of the Internet traffic safety comprehensive service management platform, powered by the Ministry of Public Security's Institute of Traffic Management Science. There is a fingerprint authentication loophole in the Traffic Control 12321 APP ios version,...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility, related to insufficient flow management, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient control over traffic. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to insufficient flow management, allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient control over traffic. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of Intel SSD microprogramming software, related to insufficient flow management, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel SSD microprogramming software is related to insufficient control over traffic. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

kernel: use-after-free in route4_change() in net/sched/cls_route.c

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. T...

DDoS Protection for Networks: Utilizing AS Prepending to Route Traffic Through Imperva

In order for Imperva to protect customers’ traffic using DDoS Protection for Networks, the Internet must select Imperva as the best path. So what does this mean? Does Imperva automatically take over the customer’s prefix and control the routing of the Internet? Well…not exactly. Internet Routing...

USN-4357-1: IPRoute vulnerability

It was discovered that IPRoute incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code...

Information Disclosure

kernel is vulnerable to information disclosure. Information leak flaws were found in the Linux kernel's Traffic Control Unit implementation. A local attacker could use these flaws to cause the kernel to leak kernel memory to user-space, possibly leading to the disclosure of sensitive information...

The vulnerability of the Traffic Ops API component of the Apache Traffic Control system, which is used to build a CDN network, allows attackers to bypass the authentication process.

The vulnerability of the Traffic Ops API component of the Apache Traffic Control system for building CDN networks is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

Authentication flaw

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

CVE-2019-12405 affects Apache Traffic Control (Traffic Ops API) when LDAP login is enabled. Versions 3.0.0 and 3.0.1 are exposed to an improper authentication vulnerability that could allow a user authenticated via LDAP to impersonate another user without the target user’s password. This is docum...

Authentication Bypass

github.com/apache/trafficcontrol is vulnerable to authentication bypass. Failure to properly handle LDAP authentication errors allow a remote attacker to authenticate as a valid user without providing the correct password...

Improper Authentication

Improper authentication is possible in Apache Traffic Control versions if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct password...