PVS - CVAD Setup Wizard - Unable to create Azure targets devices, BDM upload fails

From the Citrix Provisioning Console, using Citrix Virtual desktop wizard from the , target device creation progresses until the stage "Uploading BDM VHD file to azure" , where it fails. PVS Error Failed to Upload BDM Disk to Azure. Error:System.AggregateException: One or more errors occurred. --...

PT-2024-38095 · Red Hat · Openshift Console

Name of the Vulnerable Software and Affected Versions: OpenShift console affected versions not specified Description: A flaw was found in the OpenShift console, where several endpoints use the authHandler and authHandlerWithUser middleware functions. When the default authentication provider is se...

RADIUS Protocol Forgery Vulnerability (Blast-RADIUS)

In early July 2024, a group of security researchers found a vulnerability in the RADIUS protocol:CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by an on-path attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other...

LDAP Communication Error on XenMobile Device Manager

The following LDAP communication error appears on XenMobile Device Manager: javax.naming.CommunicationException: simple bind failed: xxxx-xxx-xxx.xxx.xxx.com:666Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:...

Desktops Do Not Register using XenDesktop and Provisioning Server

When using ​XenDesktop with Provisioning Service, the desktops do not register. Note : XenDesktop might try starting all the machines in your desktop group on the VDA Event Viewer: Under Application: Desktop Service - Failed to start WCF services. Exception Log on Failure due to unknown user name...

openldap: null pointer dereference in ber_memalloc_x function

A vulnerability was found in OpenLDAP, in bermemallocx function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service...

OESA-2024-1781 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

Akana Security Breach

Akana is an interface management platform from Akana Corporation. A security vulnerability exists in Akana versions prior to 2022.1.3 that stems from authentication breaking when using the SAML Single Sign-On SSO feature...

CVE-2023-46694

Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckeditor file manager functionality...

WordPress Plugin Tutor LMS Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

Honeywell Saia PG5 Controls Suite 安全漏洞

Honeywell Saia PG5 Controls Suite is a control system software for industrial automation and building automation from Honeywell USA. A security vulnerability exists in Honeywell Saia PG5 Controls Suite that stems from a failure to properly authenticate a user-supplied path before using it...

WordPress WP Datepicker Plugin <= 2.1.0 is vulnerable to Privilege Escalation

Software WP Datepicker Type Plugin Vulnerable versions = 2.1.0 Fixed in 2.1.1 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-3895 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 9dd2e88f0ed7 Credits Lucio Sá...

AES-SIV implementation ignores empty associated data entries (CVE-2023-2975)

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to the failure in authenticating the source of certain types of post actions. An attacker can create posts as other users by crafting a specific post action...

CVE-2024-2447

Summary: CVE-2024-2447 affects Mattermost Server releases: 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2. The root cause is failure to authenticate the source of certain post actions, allowing an authenticated attacker to create posts as other users via a cra...

The vulnerability of microprogrammed network interface cards and Zyxel USG/ZXyel VPN devices lies in the lack of authentication for a critical function, allowing attackers to disclose protected information.

The vulnerability of microprogrammed network interface cards and Zyxel USG and Zyxel VPN devices lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

SSH Public Key - No supported authentication methods available (server sent public key)

Citrix ADC: SSH is not working...

Authentication fails through Remote Power shell SDK

Authentication fails through Remote Power shell SDK whenupper case and lower case are present in the Customer ID...

CVE-2023-45083

An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently...

SoftIron HyperCloud Security Vulnerability

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud versions 1.0 through prior to 2.1 that stems from the presence of a mismanagement of privileges vulnerability. An attacker at the administrator level can exploit this...