PT-2022-35160 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the dmaengine: qcom-adm, where a wrong calling convention for prep slave sg was identified. The actual impact and attack plausibility have not yet been proven...

PT-2022-35161 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a wrong sizeof config in slave config in the qcom-adm dmaengine. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-42923

Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...

CVE-2022-42923 SQL injection in Forma LMS

Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'id' parameter in the 'appCore/index.php?r=adm/mediagallery/delete'...

FLEXlm and Citrix ADM Denial of Service Vulnerability

Note: Updated October 20, 2022 to clarify that this bypasses CVE-2022-27512 and not CVE-2022-27511, which has a different root cause. On June 27, 2022, Citrix released an advisory for CVE-2022-27511 and CVE-2022-27512, which affect Citrix ADM Application Delivery Management. Rapid7 investigated...

[ADM Service]"failed with error Unable to set capacity" when allocate ADC licence in Cloud

The newly built ADC VPX could successfully onboarding to Cloud ADM Service. However, when allocate ADC VPX Instance and Bandwidth license to VPX in ADM service GUI page, opeartion failied with below error prompt: "Failed to set capacity. Reason:Command failed on ... Request to ... failed with err...

Malicious code in adm-gp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bca68b7da5403c454ce2a41df389c459bc2276ec4476d45298a4d84e18fed2b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-37398

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below...

Stack overflow

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below...

CVE-2022-37398 A stack-based buffer overflow vulnerability was found on ADM

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below...

CVE-2022-37398

ASUSTOR Data Master (ADM) contains a stack-based buffer overflow in WebDAV when handling data size validation, affecting ADM versions 3.5.9.RUE3 and below, 4.0.5.RVI1 and below, and 4.1.0.RJD1 and below. The vulnerability could allow remote authenticated users to execute arbitrary code. Remediati...

How to apply pooled licenses to Citrix ADM

This article contains information on how to apply pooled licenses to Citrix ADM...

How to add pooled capacity licenses to ADM Service

This article provides information on how to add pooled capacity licenses on ADM Service...

CVE-2022-27511: Citrix ADM Remote Device Takeover

On Monday, June 14, 2022, Citrix published an advisory on CVE-2022-27511, a critical improper access control vulnerability affecting their Application Delivery Management ADM product. A remote, unauthenticated attacker can leverage CVE-2022-27511 to reset administrator credentials to the default...

CVE-2022-27512

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

Design/Logic Flaw

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512 Temporary disruption of the ADM license service

Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...

CVE-2022-27512

CVE-2022-27512 affects Citrix Application Delivery Management (ADM) server/agents (Citrix ADM 13.0 and 13.1). Root cause is a vulnerable FLEXlm license-manager implementation, enabling a remote attacker to disrupt the licensing service and block issuance/renewal of licenses, effectively a licensi...

Unauthenticated remote user can reset administrator password in Citrix ADM

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary An unauthorized remote user can corrupt the system which can lead to an administrator password reset to default on the next reboot...

Citrix ADM 13.0.x < 13.0.85.19 / 13.1.x < 13.1.21.53 Multiple Vulnerabilities (CTX460016)

Multiple vulnerabilities exist in Citrix Application Delivery Management ADM 13.0 prior to 13.0-85.19 and 13.1 prior to 13.1-21.53. An unauthenticated, remote attacker can exploit this to reset the administrator password and gain administrative access to the appliance. Note that Nessus has not...