CVE-2020-27146

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery CSRF attack on the affected system. A successful attack using this vulnerability...

CVE-2020-27146

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery CSRF attack on the affected system. A successful attack using this vulnerability...

CVE-2020-27146

The CVE-2020-27146 issue affects TIBCO iProcess Workspace (Browser) Core. A CSRF vulnerability could allow an unauthenticated attacker with network access to trigger actions on behalf of an authenticated user, requiring user interaction. Impact is limited to versions 11.6.0 and earlier. The issue...

CVE-2020-27146

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery CSRF attack on the affected system. A successful attack using this vulnerability...

CVE-2020-27146: Cross-Site Request Forgery (CSRF)

The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace Browser contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Site Request Forgery CSRF attack on the affected system. A successful attack using this vulnerability...

Citrix Workspace app (earlier known as Citrix Receiver) for Chrome and HTML5 Configuration Utility

How to use Configuration Utility Steps to Create a Configuration: 1. Click Create New 2. Select the appropriate Citrix Workspace app from the following options: Citrix Workspace app for Chrome Citrix Workspace app for HTML5 If you need configuration for Citrix Receiver, choose the corresponding...

CVE-2019-11634 - Remote Code Execution Vulnerability in Citrix Workspace app and Receiver for Windows

Description of Problem A vulnerability has been identified in Citrix Workspace app and Receiver for Windows that could result in local drive access preferences not being enforced allowing an attacker read/write access to the clients local drives which could enable code execution on the client...

IBM Planning Analytics Local and IBM Planning Analytics Workspace Information Disclosure Vulnerability

IBM Planning Analytics is a suite of business planning analytics solutions from IBM USA. The solution supports automated execution of business planning, budgeting, and analysis processes.Planning Analytics Workspace is the Web management interface for IBM Planning Analytics. An information...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace

Summary This Security Bulletin addresses multiple vulnerabilities in Node.js that have been remediated in IBM Planning Analytics Workspace Release 58. Vulnerability Details CVEID: CVE-2019-15604 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by improper certificate validation. ...

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

Code injection

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

CVE-2020-4649

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 expose data to non-privileged users due to not invalidating TM1Web sessions (information disclosure). The issue affects Local 2.0.9.2 and Workspace 57, with remediation in IBM Planning Analytics Local 2.0.9.3 and Plannin...

CVE-2020-4649: Exposure of Sensitive Information to an Unauthorized Actor

IBM Planning Analytics Local 2.0.9.2 and IBM Planning Analytics Workspace 57 could expose data to non-privleged users by not invalidating TM1Web user sessions. IBM X-Force ID: 186022...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics Local 2.0.9.3 and IBM Planning Analytics Workspace Release 58. There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by IBM Planning Analytics and IBM Planning...

PT-2020-19771 · Browserless · Browserless-Chrome

Name of the Vulnerable Software and Affected Versions: browserless-chrome versions prior to 1.43.0 Description: The issue affects browserless-chrome, where user input from the "workspace endpoint" is used to create a file path filePath. This filePath is then fetched and sent back to the user,...

CVE-2020-7758: Improper Limitation of a Pathname to a Restricted Directory

This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server...

Path Traversal

Overview browserless-chrome is a web-service that allows for remote clients to connect, drive, and execute headless work; all inside of docker. It offers first-class integrations for puppeteer, playwright, selenium's webdriver, and a slew of handy REST APIs for doing more common work. Affected...

Unable to limit visibility of applications to specific user groups

Previously able to restrict apps visibility to specific users or user groups using the 'Limit Visibility' option through the app properties. Now all company's users can see all apps when logging to the Cloud Workspace...

The vulnerability of the BI Workspace module of the SAP BusinessObjects Business Intelligence platform allows a hacker to elevate their privileges by intercepting sessions or exposing protected information.

The vulnerability of the BI Workspace module of the SAP BusinessObjects Business Intelligence platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges by intercepting sessions or disclose...