Design/Logic Flaw

cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...

CVE-2016-10852

cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...

CVE-2016-10852

cPanel versions prior to 11.54.0.4 are affected by a lack of ACL enforcement in the AppConfig subsystem (SEC-85). Red Hat and NVD references confirm the issue, affecting cPanel’s AppConfig handling; no explicit exploit details or fix version are provided in the connected documents. The reports de...

Design/Logic Flaw

In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts SEC-393...

CVE-2019-14391

CVE-2019-14391: Affects cPanel prior to 82.0.2 where Reseller package creation ACLs are not properly enforced (SEC-514). Root cause is insufficient ACL enforcement; impact is privilege/permission concerns for reseller package creation. Affected versions: all before 82.0.2. Remediation: upgrade to...

Security Bulletin: ACLs not backed up on VxFS-HP-UX filesystems by IBM Spectrum Protect Backup-Archive Client (CVE-2019-4236)

Summary ACL entries associated with a file or directory on a VxFS HP-UX filesystem may not be backed up by the IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client. Vulnerability Details CVEID: CVE-2019-4236 DESCRIPTION: A Spectrum Protect client backup or archive operation...

CVE-2018-17196

A flaw was found in Apache Kafka. This flaw allows authorized clients with write permissions to manually craft a Produce request, which can bypass transaction/idempotent ACL checks...

Eclipse Foundation Mosquitto Pattern Based ACL Bypass (CVE-2017-7650)

An ACL bypass vulnerability has been reported in Eclipse Foundation Mosquitto. A remote user can exploit this vulnerability by sending a crafted request to the target server...

CVE-2019-4236

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...

CVE-2019-4236

A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List ACL entries from backup or archive if there are more than twelve ACL entries associated with the object in total. As a result, it could allow a local attacker to...

CVE-2019-4236

CVE-2019-4236 affects IBM Spectrum Protect Backup-Archive Client on HP-UX with VxFS: when an object has more than twelve ACL entries, backup/archive operations may silently skip ACL entries, risking restoration/retrieval with incorrect ACLs. Affected: Spectrum Protect 7.1.x on HP-UX IA64 (7.1.0.0...

openSUSE Security Update : samba (openSUSE-2019-1755)

"This update for samba fixes the following issues : Security issues fixed : - CVE-2019-12435: zone operations can crash rpc server; bso13922 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2019-1755. The...

OPENSUSE-SU-2019:1755-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-12435: zone operations can crash rpc server; bso13922; bsc1137815. Other issues fixed: - Fix cephwrapflistxattr debug message; bso13940; bsc1134697. - Add cephsnapshots VFS module; jscSES-183. - Fix vfsceph...

Oracle Communications Billing and Revenue Management CVE-2019-12086 Remote Security Vulnerability

Description Oracle Communications Billing and Revenue Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Billing Care' and 'Business Operations Center jackson-databind' components are affected. This vulnerability affects the...

CVE-2018-17196

In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to...

CVE-2018-17196

In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to...

Cross site request forgery (csrf)

In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to...

CVE-2018-17196

CVE-2018-17196 (Apache Kafka) : A vulnerability in Kafka versions 0.11.0.0–2.1.0 allows a remote authenticated attacker to bypass transaction/idempotent ACL validation by crafting a Produce request. The issue stems from improper input validation, requiring authenticated clients with Write permiss...

CVE-2018-17196

In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to...

Apache axis remote command execution vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, convinced that the server found the Apache axis component remote command execution exploit way. The vulnerability is essentially due to the administrator for the AdminService configuration error, when enableRemoteAdmin property is set to true, the attacker can remotely use of the...