5557 matches found
org.jvnet.hudson.main:hudson-war (1.185), org.jvnet.hudson.plugins:active-directory (1.2) +2 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.185)
org.jvnet.hudson.main:hudson-core MAVEN version 1.185 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-war 1.185 - org.jvnet.hudson.plugins:active-directory 1.2 -...
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability...
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability...
CVE-2022-30215
Active Directory Federation Services Elevation of Privilege Vulnerability...
Privilege escalation
Active Directory Federation Services Elevation of Privilege Vulnerability...
CVE-2022-30215 Active Directory Federation Services Elevation of Privilege Vulnerability
...
CVE-2022-30215 Active Directory Federation Services Elevation of Privilege Vulnerability
...
CVE-2022-30215
CVE-2022-30215 is identified in the provided documents as an Active Directory Federation Services Elevation of Privilege vulnerability. The NVD entry lists both CVSS v2 and CVSS v3.1 metrics (base scores 8.5 and 7.5 respectively) indicating NETWORK attack vector; CVSSv2 shows MEDIUM exploit compl...
Active Directory Federation Services Elevation of Privilege Vulnerability
...
PT-2022-3844 · Microsoft · Active Directory Federation Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services affected versions not specified Description: The issue is related to insufficient access restrictions in Active Directory Federation Services AD FS on Windows operating systems. It allows a remote attacker...
CVE-2022-30215: Undefined Security Weakness
Active Directory Federation Services Elevation of Privilege Vulnerability...
Microsoft Windows Active Directory Permission Authorization and Access Control Vulnerabilities
Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...
Zoho ManageEngine ADAudit Plus XXE
The vulnerability of the cewolf component of the Windows Active Directory management and reporting software Zoho ManageEngine ADAudit Plus is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to perform XXE attack...
Configure Enterprise File Shares to Use Microsoft Hidden Shares on Windows Server 2008
This article describes how to configure Enterprise File Shares on Access Gateway Enterprise Edition appliance to use Microsoft hidden shares and the %username% environment variable on Microsoft Windows Server 2008. Requirements Remote Desktop Protocol RDP or console access to the Windows Active...
OESA-2022-1735 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: MaxQueryDuration not honoured in Samba AD DC LDAPCVE-2021-3670...
ManageEngine ADAudit Plus CVE-2022-28219
This module exploits CVE-2022-28219, which is a pair of vulnerabilities in ManageEngine ADAudit Plus versions before build 7060: a path traversal in the /cewolf endpoint, and a blind XXE in, to upload and execute an executable file. Module Options msf use...
samba bug fix and enhancement update
An update is available for samba. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...
samba bug fix and enhancement update
An update is available for samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...