234 matches found
CVE-2014-5040
HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary 1 access key credentials by leveraging knowledge of a key ID or 2 signing certificates by leveraging knowledge of a...
API Admin Auth Weakness
Overview Versions of tomato prior to 0.0.6 are affected by a somewhat complex authentication bypass vulnerability in the admin service when only a single access key is configured on the server. The vulnerability allows an attacker to guess the password for the admin service, no matter how complex...
Palo Alto Device / PAN-OS Detection (HTTP XML-API)
HTTP XML-API based detection of the Palo Alto devices and the underlying PAN-OS operating system. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Security auditing tool for AWS: AWS Scout2
Scout2 is an open source tool that helps assessing the security posture of AWS environments. Using the AWS API, the Scout2 Python scripts fetch CloudTrail, EC2, IAM, RDS, and S3, configuration data. The gathered configuration is analysed and stored as JSON objects in several JavaScript files. The...
CVE-2013-7379
The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config.master.api.accesskey...
Debian Security Advisory DSA 2389-1 (linux-2.6 - privilege escalation/denial of service/information leak)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-2183Andrea Righi reported an issue in KSM, a memory-saving de-duplication...
Ubuntu Update for nova USN-1247-1
Ubuntu Update for Linux kernel vulnerabilities USN-1247-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12471.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1247-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
[SECURITY] [DSA 2389-1] linux-2.6 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2389-1 [email protected] http://www.debian.org/security/ Dann Frazier January 15, 2012 http://www.debian.org/security/faq -...
CVE-2011-4311
ResourceSpace before 4.2.2833 does not properly validate access keys, which allows remote attackers to bypass intended resource restrictions via unspecified vectors...
CVE-2011-4311
CVE-2011-4311 affects ResourceSpace before 4.2.2833, where improper validation of access keys allows remote attackers to bypass intended resource restrictions via unspecified vectors. The vulnerability enables unauthorized access without specific vectors described in the provided documents. No ex...
Ubuntu 11.10 : nova vulnerability (USN-1247-1)
An information leak was discovered in Nova. An attacker with access to a valid EC2ACCESSKEY could obtain the corresponding EC2SECRETKEY for that user. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted...
CVE-2004-2732
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key...
CVE-2004-2732
The vulnerability CVE-2004-2732 affects nbmember.cgi in Netbilling 2.0, where a remote attacker can disclose sensitive information via the cmd=test option to determine the access key. Documents confirm the flaw is an information-disclosure issue with network access and no authentication requireme...