23 matches found
EUVD-2020-6470
Malware in sbrugna...
EUVD-2020-6492
Malware in sbrugna...
CVE-2020-14348
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating...
CVE-2020-14348
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating...
Design/Logic Flaw
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating...
CVE-2020-14348
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating...
CVE-2020-14348
AMQ Online prior to 1.5.2 is affected by CVE-2020-14348, where injecting an invalid top-level field into a user’s AddressSpace configuration in the user namespace can lead to an inconsistent state, causing provisioning and address-creation failures and degraded operation of AMQ Online components....
CVE-2020-14348: Uncaught Exception
It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AMQ Online in an inconsistent state, where the AMQ Online components do not operate properly, such as the failure of provisioning and the failure of creating...
PT-2020-13977
Name of the Vulnerable Software and Affected Versions AMQ Online versions prior to 1.5.2 Description The issue arises when an invalid field is injected into a user's AddressSpace configuration within the user namespace, causing AMQ Online to enter an inconsistent state. This inconsistency leads t...
CVE-2020-14319
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...
CVE-2020-14319
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...
Cross site request forgery (csrf)
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...
CVE-2020-14319
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...
CVE-2020-14319
The CVE-2020-14319 entry concerns a Cross-Site Request Forgery (CSRF) vulnerability in the AMQ Online console. Affected are AMQ Online versions prior to 1.5.2 and Enmasse versions 0.31.0-rc1 up to, but not including, 0.32.2. The flaw stems from insufficient preflight checks, enabling CSRF when au...
PT-2020-13973
Name of the Vulnerable Software and Affected Versions AMQ Online versions prior to 1.5.2 Enmasse versions 0.31.0-rc1 through 0.32.2 Description A Cross-Site Request Forgery CSRF issue was discovered, which can be exploited when preflight checks are not performed or are bypassed. This can affect...
CVE-2020-14319: Cross-Site Request Forgery (CSRF)
It was found that the AMQ Online console is vulnerable to a Cross-Site Request Forgery CSRF which is exploitable in cases where preflight checks are not instigated or bypassed. For example authorised users using an older browser with Adobe Flash are vulnerable when targeted by an attacker. This...
CVE-2020-14348
A flaw was found in AMQ Online before 1.5.2, where injecting an invalid field to a user's address space configuration of the user namespace puts AMQ Online in an inconsistent state. In this inconsistent state, the AMQ Online components do not operate properly. For example, the failure of...
Red Hat AMQ Online Cross-Site Request Forgery Vulnerability
Red Hat AMQ Online is a Red Hat solution that provides the overall functionality of a self-service i.e., service-as-a-service messaging platform running on OpenShift. A cross-site request forgery vulnerability exists in Red Hat AMQ Online version 1.5.1. The vulnerability stems from a WEB...
CVE-2020-14319
A flaw was found in the AMQ Online console, where it is vulnerable to a Cross-Site Request Forgery attack CSRF, which is exploitable in cases where preflight checks are not instigated or bypassed. This flaw allows an attacker to target authorized users using an older browser with Adobe Flash. The...
amq-on: CSRF (in graphQL requests)
A flaw was found in the AMQ Online console, where it is vulnerable to a Cross-Site Request Forgery attack CSRF, which is exploitable in cases where preflight checks are not instigated or bypassed. This flaw allows an attacker to target authorized users using an older browser with Adobe Flash. The...