CVE-2019-0094

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...

CVE-2019-1000

An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...

Privilege escalation

An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...

CVE-2019-1000

An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...

CVE-2019-1000

CVE-2019-1000 affects Microsoft Azure Active Directory Connect (AD Connect) build 1.3.20.0. The vulnerability enables elevation of privilege by an attacker who authenticates to the AD Connect server to run two PowerShell cmdlets in the context of a privileged account, enabling privileged actions....

Microsoft Azure Active Directory Connect Remote Elevation of Privilege Vulnerability (CNVD-2019-14680)

Microsoft Azure Active Directory Connect ADC is a service from Microsoft that provides identity and access management in the cloud. A remote elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect. It allows an attacker to execute two PowerShell Cmdlets in the...

Samba AD DC Principal Modification Vulnerability (CVE-2018-16860)

Samba is prone to a user impersonation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

Debian DLA-1788-1 : samba security update

Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Samba's Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. For Debian 8 'Jessie', this problem has been fixed in version 2:4.2.14+dfsg-0+deb8u13. ...

[SECURITY] [DLA 1788-1] samba security update

Package : samba Version : 2:4.2.14+dfsg-0+deb8u13 CVE ID : CVE-2018-16860 Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Sambas Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. For Debian 8...

Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-26293 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0086 , CVE-2019-0089 , CVE-2019-0090 , CVE-2019-0091 , CVE-2019-0092 , CVE-2019-0093 , CVE-2019-0094 ,...

Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US

No description provided...

Microsoft Azure AD Connect Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions. To exploit this, an attacker would need to authenticate to the...

PT-2019-2206 · Intel · Intel Active Management Technology

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 12.0.35 Description: The issue is related to insufficient input validation in the Intel Active Management Technology subsystem. This could potentially allow a remote attacker to cause a...

PT-2019-2205 · Intel · Intel Active Management Technology

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 11.8.65 Intel Active Management Technology versions prior to 11.11.65 Intel Active Management Technology versions prior to 11.22.65 Intel Active Management Technology versions prior to...

Microsoft Internet Explorer CVE-2019-0921 Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...

Microsoft Azure Active Directory Connect CVE-2019-1000 Remote Privilege Escalation Vulnerability

Description Microsoft Azure Active Directory Connect is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft Azure Active Directory Connect 1.3.20.0...

PT-2019-2202 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.65 IntelR AMT versions prior to 11.11.65 IntelR AMT versions prior to 11.22.65 IntelR AMT versions prior to 12.0.35 Description: The issue is caused by insufficient input validation in the Intel Active...

PT-2019-2204 · Intel · Intel Active Management Technology

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 11.8.65 Intel Active Management Technology versions prior to 11.11.65 Intel Active Management Technology versions prior to 11.22.65 Intel Active Management Technology versions prior to...

Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum

Description S4U2Self is an extension to Kerberos used in Active Directory to allow a service to request a kerberos ticket to itself from the Kerberos Key Distribution Center KDC for a non-Kerberos authenticated user principal in Kerboros parlance. This is useful to allow internal code paths to be...

Pacbot - Platform For Continuous Compliance Monitoring, Compliance Reporting And Security Automation For The Cloud

Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to gauge policy...