The vulnerability of Intel SSD microprogramming software, related to insufficient flow management, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel SSD microprogramming software is related to insufficient control over traffic. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

kernel: use-after-free in route4_change() in net/sched/cls_route.c

A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. T...

DDoS Protection for Networks: Utilizing AS Prepending to Route Traffic Through Imperva

In order for Imperva to protect customers’ traffic using DDoS Protection for Networks, the Internet must select Imperva as the best path. So what does this mean? Does Imperva automatically take over the customer’s prefix and control the routing of the Internet? Well…not exactly. Internet Routing...

USN-4357-1: IPRoute vulnerability

It was discovered that IPRoute incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code...

Information Disclosure

kernel is vulnerable to information disclosure. Information leak flaws were found in the Linux kernel's Traffic Control Unit implementation. A local attacker could use these flaws to cause the kernel to leak kernel memory to user-space, possibly leading to the disclosure of sensitive information...

The vulnerability of the Traffic Ops API component of the Apache Traffic Control system, which is used to build a CDN network, allows attackers to bypass the authentication process.

The vulnerability of the Traffic Ops API component of the Apache Traffic Control system for building CDN networks is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

Authentication flaw

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct...

CVE-2019-12405

CVE-2019-12405 affects Apache Traffic Control (Traffic Ops API) when LDAP login is enabled. Versions 3.0.0 and 3.0.1 are exposed to an improper authentication vulnerability that could allow a user authenticated via LDAP to impersonate another user without the target user’s password. This is docum...

Authentication Bypass

github.com/apache/trafficcontrol is vulnerable to authentication bypass. Failure to properly handle LDAP authentication errors allow a remote attacker to authenticate as a valid user without providing the correct password...

Apache Traffic Control Authentication Vulnerability

Apache Traffic Control is the United States Apache Apache Software Foundation of a distributed , scalable content delivery solutions. The product is mainly used to build large-scale content delivery network. An authentication vulnerability exists in Apache Traffic Control, which stems from...

Improper Authentication

Improper authentication is possible in Apache Traffic Control versions if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that user without that user's correct password...

Alleviating Digital Transformation Performance and Security Concerns

Businesses across the world are migrating applications to the cloud to reduce IT cost and complexity, and accelerate the pace of innovation. But when you move applications and services to the cloud you lose visibility and control over your infrastructure, increasing risk and uncertainty. That's w...

A week in security (November 12 – 18)

Last week on Malwarebytes Labs, we found out that TrickBot became a top business threat, so we took a deeper look at what's new with it. With Christmas just around the corner, the Secret Sister scam returned. We also touched on the security and privacy or lack thereof in smart jewelry, air traffi...

Compromising vital infrastructure: air traffic control

While most of us know that flying is the safest mode of transport, we still feel that sigh of relief when the plane has made its landing on the runway and we can text our loved ones that we have arrived safe and sound. Accidents may be rare, but they're often shocking and horrific and accompanied...

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P01 TI x-stream Codename: TIIP2 V1.05.P01 ThermiC...

FLIR Systems FLIR Thermal Traffic Cameras Websocket Device Manipulation

!/usr/bin/env python -- coding: utf-8 -- FLIR Systems FLIR Thermal Traffic Cameras Websocket Device Manipulation Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P...

Threat Outbreak Alert RuleID33408: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58696 First Published: 2018 August 14 18:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33408 may contain the following files: Name |...