3579 matches found
CVE-2024-20909
Vulnerability in Oracle Audit Vault and Database Firewall component: Firewall. Supported versions that are affected are 20.1-20.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. Successful...
Design/Logic Flaw
Vulnerability in Oracle Audit Vault and Database Firewall component: Firewall. Supported versions that are affected are 20.1-20.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. Successful...
Design/Logic Flaw
Vulnerability in Oracle Audit Vault and Database Firewall component: Firewall. Supported versions that are affected are 20.1-20.9. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. Successf...
CVE-2024-20909
CVE-2024-20909 affects Oracle Audit Vault and Database Firewall (Firewall component) for versions 20.1–20.9. The issue allows an unauthenticated attacker with network access via Oracle Net to compromise data, enabling unauthorized creation, deletion or modification of critical data. The base scor...
CVE-2024-20911
CVE-2024-20911 affects Oracle Audit Vault and Database Firewall (Firewall component) with affected versions 20.1–20.9. The vulnerability allows an attacker with network access via Oracle Net and high privileges to read a subset of data, requiring user interaction and potentially impacting additio...
China’s Hackers Keep Targeting US Water and Electricity Supplies
Plus: Russia was likely behind widespread GPS outages, Vault 7 leaker was sentenced, police claim to trace Monero cryptocurrency, and more...
GHSA-5X4G-Q5RC-36JP vulnerabilities
Vulnerabilities for packages: vault...
GHSA-5X4G-Q5RC-36JP vulnerabilities
Vulnerabilities for packages: vault...
Sensitive Information Disclosure
Vault is vulnerable to Sensitive Information Disclosure. The vulnerability is caused when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices. This issue can be exploited by an attacker to Disclose Sensitive Information in the log...
Former CIA Engineer Sentenced to 40 Years for Leaking Classified Documents
A former software engineer with the U.S. Central Intelligence Agency CIA has been sentenced to 40 years in prison by the Southern District of New York SDNY for transmitting classified documents to WikiLeaks and for possessing child pornographic material. Joshua Adam Schulte, 35, was originally...
GHSA-VGH3-MWXQ-RCP8 Hashicorp Vault may expose sensitive log information
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
Hashicorp Vault may expose sensitive log information
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
CVE-2024-0831
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
Input validation
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
CVE-2024-0831
Summary: CVE-2024-0831 affects HashiCorp Vault and Vault Enterprise. When an audit device is enabled with the log_raw option, sensitive information may be logged to other audit devices, even if those devices are not configured to use log_raw. This creates a potential information disclosure in log...
CVE-2024-0831 Vault May Expose Sensitive Information When Configuring An Audit Log Device
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
CVE-2024-0831 Vault May Expose Sensitive Information When Configuring An Audit Log Device
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
CVE-2024-0831 Vault May Expose Sensitive Information When Configuring An Audit Log Device
Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...
Vault May Expose Sensitive Information When Configuring An Audit Log Device
Summary Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw . This vulnerability, CVE-2024-0831, was...
Improper Authentication in HashiCorp Vault
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the remove-peer raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2...