Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable Vulnerability Details CVEID:CVE-2024-21094...

IBM Planning Analytics Local Authentication Error Vulnerability

IBM Planning Analytics Local is a web-based local architecture from International Business Machines IBM. An authentication error vulnerability exists in IBM Planning Analytics Local versions 2.0 and 2.1 that originates from a connection to a MongoDB server that does not require password...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143 IBM Planning Analytics Local missing authentication

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143

CVE-2024-35143 concerns IBM Planning Analytics Local (2.0, 2.1) that connects to a MongoDB server which is exposed to remote access with no password authentication. The root cause is unauthenticated MongoDB connections enabled by the product’s configuration, allowing a remote attacker to gain una...

CVE-2024-35143 IBM Planning Analytics Local missing authentication

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

PT-2024-26336 · Mongodb +1 · Mongodb +1

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue concerns a lack of password authentication in MongoDB connections, allowing a remote attacker to gain unauthorized access to the database. This could potentially lea...

Security Bulletin: IBM Analytics Engine in Cloud pak for Data affected by vulnerability in GNOME's GdkPixbuf library (CVE-2022-48622)

Summary IBM Analytics Engine in Cloud pak for Data contains a vulnerable version of GNOME's GdkPixbuf library. Vulnerability Details CVEID:CVE-2022-48622 DESCRIPTION: GNOME GdkPixbuf could allow a remote attacker to execute arbitrary code on the system, caused by a heap memory corruption in the...

The vulnerabilities of the event monitoring, threat detection, and security analytics platforms of IBM QRadar Suite and IBM Cloud Pak for Security allow attackers to execute arbitrary commands.

The vulnerability of platform monitoring systems for events detection, threat detection, and security analytics in IBM QRadar Suite and IBM Cloud Pak for Security exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

XSS and OAuth Combo Threatens Millions of Users Due to Hotjar Flaw

Cybersecurity Experts Uncover Critical Vulnerabilities in Leading Web Analytics Platform Hotjar, Potentially Exposing Sensitive Data of Millions of…...

BIT-GITLAB-2024-5067 Exposure of Sensitive Information to an Unauthorized Actor in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles...

The vulnerability of the SQL engine of the Dell Data Analytics Engine (DDAE) in the Dell Data Lakehouse data storage platform allows a hacker to disclose protected information.

The vulnerability of the SQL engine of the Dell Data Analytics Engine DDAE in the Dell Data Lakehouse data storage platform is related to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

FreeBSD : Gitlab -- Vulnerabilities (24c88add-4a3e-11ef-86d7-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24c88add-4a3e-11ef-86d7-001b217b3468 advisory. Gitlab reports: XSS via the Maven Dependency Proxy Project level analytics settings leaked in...

CVE-2024-5067

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles...

CVE-2024-5067 Exposure of Sensitive Information to an Unauthorized Actor in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles...

CVE-2024-5067 Exposure of Sensitive Information to an Unauthorized Actor in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level analytics settings could be leaked in DOM to group members with Developer or higher roles...

CVE-2024-5067

Removed by vendor...

GitLab 16.11 < 17.0.5 / 17.1 < 17.1.3 / 17.2 < 17.2.1 (CVE-2024-5067)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab EE affecting all versions starting from 16.11 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where certain project-level...

The vulnerabilities of the event monitoring, threat detection, security analytics platforms of IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, allow attackers to gain access to confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, security analytics in the IBM QRadar Suite, and IBM Cloud Pak for Security related to security configuration errors can be exploited by attackers operating remotely. This allows them to gain access to confidential...