Visualizing Windows Active Directory Event Logs: LogonTracer

Investigate malicious logon by visualizing and analyzing Windows active directory event logs. LogonTracer associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which account login attempt occurs and...

Microsoft Windows: Recovering of BitLocker-protected fixed drives (Require AD Backup)

This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required credentials. This policy setting is applied when you turn on BitLocker. The Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

June 21, 2018—KB4284822 (OS Build 16299.522)

None None...

Denial of Service Vulnerability in Micropoint Active Defense Personal Edition

Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...

After Upgrade to WEM 4.6 agents not getting configurations with error: Agent (Agent name) is not bound to any configuration set

Upgrade WEM environment from 4.5 to 4.6. After upgrading, WEM agents are randomly reported with the following different status under Administration Agents Registrations: "Agent is bound to multiple configuration sets." Then the same agents are reported with the following status: "Agent is not be...

Denial of Service Vulnerability in Micropoint Active Defense Personal Edition

Micropoint Active Defense System Personal Edition is a new-generation anti-virus product with completely independent intellectual property rights developed by Micropoint Baihui Beijing Information Security Technology Company Limited hereinafter referred to as Micropoint. A denial-of-service...

New FastTrack benefit: Deployment support for Co-management on Windows 10 devices

This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog Getting th...

Security Bulletin: Incorrect access control list (ACL) might occur in case of a network retransmission, when Active Cloud Engine (ACE) is being used on IBM Storwize V7000 Unified system (CVE-2014-0875)

Summary Incorrect access control list ACL might occur in case of a network retransmission, when Active Cloud Engine ACE is being used. Vulnerability Details CVEID: CVE-2014-0875 DESCRIPTION: Active Cloud Engine ACE component of IBM V7000 Unified uses NFS client operations for data transmission. A...

Security Bulletin: Samba vulnerability issue on SONAS (CVE-2013-4408 and CVE-2012-6105)

Summary An attacker could gain privileged access to SONAS system by exploiting a vulnerability in Samba. Vulnerability Details CVE ID: CVE-2013-4408 and CVE-2012-6105 DESCRIPTION: This issue affects only those SONAS systems that use Active Directory server for authentication. Configuration with...

Security Bulletin: Samba vulnerability issue on IBM Storwize V7000 Unified (CVE-2013-4408 and CVE-2012-6105)

Summary An attacker could gain privileged access to IBM Storwize V7000 Unified system by exploiting a vulnerability in Samba. Vulnerability Details CVE ID: CVE-2013-4408 and CVE-2012-6105 DESCRIPTION: This issue affects only those IBM Storwize V7000 Unified systems that use Active Directory serve...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2017-3735)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2017-3735 Vulnerability Details CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error while parsing an IPAdressFamily extensi...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerability (CVE-2017-1000366)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerability. CVE-2017-1000366 Vulnerability Details CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the system, caused by a vulnerability that allows specially...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by openssl vulnerabilities (CVE-2017-3736)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2017-3736 Vulnerability Details CVEID: CVE-2017-3736 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a carry propagation flaw in the the x8664...

Security Bulletin: IBM Security Proventia Network Active Bypass is affected by glibc vulnerabilities (CVE-2015-8985)

Summary IBM Security Proventia Network Active Bypass has addressed the following vulnerabilities. CVE-2015-8985 Vulnerability Details CVEID: CVE-2015-8985 DESCRIPTION: glibc is vulnerable to a denial of service, caused by a flaw in the popfailstack function. By using a specially crafted extended...

Security Bulletin: Vulnerability in OpenSSL affects IBM Security Network Active Bypass (CVE-2016-7055)

Summary An OpenSSL vulnerability was found in IBM Security Network Active Bypass. IBM Security Network Active Bypass has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-7055 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error in a Broadwell-specific...

Security Bulletin: IBM Security Key Lifecycle Manager is affected by active debugging code (CVE-2016-6117)

Summary IBM Security Key Lifecycle Manager can be deployed with active debugging code that can create unintended entry points. Vulnerability Details CVEID: CVE-2016-6117 DESCRIPTION: IBM Tivoli Key Lifecycle Manager can be deployed with active debugging code that can disclose sensitive informatio...

Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Security Network Active Bypass (CVE-2016-3706, CVE-2016-4429)

Summary GNU C library glibc vulnerabilities were found that affect IBM Security Network Active Bypass. Vulnerability Details CVEID: CVE-2016-3706 DESCRIPTION: GNU C Library glibc or libc6 is vulnerable to a denial of service, caused by a stack-based buffer overflow by the getaddrinfo function...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2016-6304, CVE-2016-6303, CVE-2016-2181, CVE-2016-6309, CVE-2016-7052 )

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Network Active Bypass. IBM Security Network Active Bypass has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6303 DESCRIPTION: OpenSSL is...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Network Active Bypass (CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Security Network Active Bypass. IBM Security Network Active Bypass has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote...

Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Security Network Active Bypass (CVE-2014-9761, CVE-2015-8778, CVE-2015-8779)

Summary GNU C library glibc vulnerabilities were found that affect IBM Security Network Active Bypass. Vulnerability Details CVEID: CVE-2014-9761 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the nan function. By sending an...