SELinux 资源管理错误漏洞

SELinux is a Linux subsystem of the National Security Agency that utilizes a secure architecture that allows administrators to better control who has access to the system. A security vulnerability exists in SELinux version 3.2, which stems from the CIL compiler of SELinux having an after-free in...

IBM Security Verify Privilege Vault Link Injection Vulnerability

IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. A link injection vulnerability exists in IBM...

IBM Security Verify Privilege Vault Information Disclosure Vulnerability

IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. An information disclosure vulnerability exis...

IBM Security Verify Privilege Vault Cross-Site Scripting Vulnerability

IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. A cross-site scripting vulnerability exists ...

CVE-2021-29677

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4609

IBM Security Sevret Server IBM Security Verify Privilege Manager 10.8.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917...

CVE-2020-4610

IBM Security Secret Server IBM Security Verify Privilege Manager 10.8.2 could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919...

CVE-2021-29676

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site...

CVE-2021-29677

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2021-20583

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 could disclose sensitive information through an HTTP GET request by a privileged user due to improper input validation.. IBM X-Force ID: 199396...

Input validation

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 could disclose sensitive information through an HTTP GET request by a privileged user due to improper input validation.. IBM X-Force ID: 199396...

Buffer overflow

IBM Security Sevret Server IBM Security Verify Privilege Manager 10.8.2 is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917...

Design/Logic Flaw

IBM Security Secret Server IBM Security Verify Privilege Manager 10.8.2 could allow a local user to execute code due to improper integrity checks. IBM X-Force ID: 184919...

Cross site scripting

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site...

CVE-2021-29677

CVE-2021-29677 is an XSS vulnerability in IBM Security Verify Privilege Vault (10.9.66) where attackers can embed arbitrary JavaScript in the Web UI, potentially altering functionality and disclosing credentials within a trusted session. The root cause is a cross-site scripting flaw in the Privil...

CVE-2021-29677

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2021-29676

IBM Security Verify Privilege Vault (10.9.66 and prior releases) is vulnerable to a link-injection flaw. A remote attacker could lure a user into clicking a specially crafted URL, enabling cross-site scripting, cache poisoning, or session hijacking. Affected product facet: IBM Security Verify Pri...

CVE-2021-29676

IBM Security Verify IBM Security Verify Privilege Vault 10.9.66 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site...

CVE-2021-20583

CVE-2021-20583 affects IBM Security Verify Privilege Vault (IBM Security Verify) up to version 10.9.66. The issue is an information disclosure via an HTTP GET request by a privileged user caused by improper input validation in the Privilege Vault component. Impact is exposure of sensitive informa...