5080 matches found
CVE-2019-4236
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-4236
CVE-2019-4236 affects IBM Spectrum Protect Backup-Archive Client on HP-UX with VxFS: when an object has more than twelve ACL entries, backup/archive operations may silently skip ACL entries, risking restoration/retrieval with incorrect ACLs. Affected: Spectrum Protect 7.1.x on HP-UX IA64 (7.1.0.0...
CVE-2019-4236
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-4236: Undefined Security Weakness
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...
CVE-2019-11989
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA Agent module could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7,...
Security feature bypass
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA Agent module could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7,...
CVE-2019-11989
A security vulnerability in HPE IceWall SSO Agent Option and IceWall MFA Agent module could be exploited remotely to cause a denial of service. The versions and platforms of Agent Option modules that are impacted are as follows: 10.0 for Apache 2.2 on RHEL 5 and 6, 10.0 for Apache 2.4 on RHEL 7,...
Security Bulletin: Db2 vulnerability affects the IBM Spectrum Protect Server (CVE-2018-1448)
Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server is affected by an IBM Db2 vulnerability that could allow a local user to overwrite arbitrary files owned by the Db2 instance owner. UPDATED 1/16/2019: Changed "First Fixing VRM Level" in Remediation/Fixes table for 8.1 from...
CVE-2019-12458
FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...
CVE-2019-12458: Improper Limitation of a Pathname to a Restricted Directory
FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...
PT-2019-12804
Name of the Vulnerable Software and Affected Versions FileRun versions prior to 2019.06.01 Description The issue allows directory listing in the css/ext-ux directory. This has been fixed in a later version. Recommendations For versions prior to 2019.06.01, update to version 2019.06.01 or later to...
Qualys Policy Compliance Notification: Policy Library Update
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...
Simplifying Security Configuration: A UX Revamp Retrospective
With the March 2019 Release update, the Security Configuration User Interface UI evolution is now complete, and we hope it integrates more seamlessly into your online business. Over time, Akamai has added new products, features, and functionality to its security solutions to protect your web...
Security Bulletin: WebSphere MQ Internet Pass-Thru is affected by multiple vulnerabilities in IBM Java Runtime
Summary WebSphere MQ Internet Pass-Thru has addressed the following vulnerabilities in IBM® Runtime Environment Java™ Version 7.0.10.35. These issues were disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability Details If you run your own Java code using the IBM Java Runtime...
Gmail Glitch Enables Anonymous Messages in Phishing Attacks
A Gmail bug has been discovered that allows a hacker to tinker with the “from” header in an email and ultimately leave the sender display blank, rendering the email anonymous. The trick could be weaponized for phishing attacks that purport to be official warnings or system messages. Software...
Amazon Linux AMI : openssl (ALAS-2018-1065)
Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...
CVE-2018-15528
Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...
PT-2018-13065
Name of the Vulnerable Software and Affected Versions BMC MyIT Java System Solutions SSO plugin version 4.0.13.1 Description A Reflected Cross-Site Scripting issue exists, allowing a remote attacker to inject client-side scripts into the select sso function. This is triggered when a victim opens ...