Fortinet FortiAuthenticator Cross-Site Scripting Vulnerability (CNVD-2018-10945)

Fortinet FortiAuthenticator is a user identity management appliance that enhances enterprise security by simplifying and centralizing the management and storage of user identity information. A cross-site scripting vulnerability exists in the "CSRF Authentication Failure" page in Fortinet...

Apache ZooKeeper Security Bypass Vulnerability

Apache Zookeeper is a software project of the U.S. Apache Apache Software Foundation, which can provide open source distributed configuration services, synchronization services and naming registry for large-scale distributed computing. A security vulnerability exists in Apache ZooKeeper versions...

Code execution vulnerability in multiple Lenovo products

Lenovo Flex System x240 M5 and others are server devices from the Chinese company Lenovo. A security vulnerability exists in a number of Lenovo products that originates from a program failing to properly authenticate itself before running signed code. An attacker in close physical proximity could...

OpenDaylight Helium Information Disclosure Vulnerability

Opendaylight, a project of the Linux Foundation, is a community-driven, open-source, software-defined networking framework that includes a collection of modules to perform networking tasks that need to be done quickly.OpenDaylight Helium is a version of it. A security vulnerability exists in the...

IBM Business Process Manager Information Disclosure Vulnerability (CNVD-2018-08191)

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A security vulnerability exists in IBM BPM version 8...

CVE-2017-15817

In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure...

CVE-2017-15817

In all Qualcomm products with Android releases from CAF using the Linux kernel, when an access point sends a challenge text greater than 128 bytes, the host driver is unable to validate this potentially leading to authentication failure...

Secure Web with PAC File unable to authenticate fails with http 407 error

While evaluating XenMobile with Secure Web with PAC File,Webproxy after reading the PAC file request Authentication, but it seems that Secure Web does not provide authentication. Therefore we get an Authentication failure from the Webproxy on the webpage of the Proxy within Secure Web. MDX Settin...

SDX backups not being transferred back to MAS appliance

Backups seems to be started on SDX but not getting transferred to MAS. You can see the backups are created on the SDX but they are never transferred back to MAS server. Backups present on the SDX: You will see these errors in the MAS logs: mpsconfig.log: Thursday, 11 Jan 18 07:41:33.394 +0100 Err...

Design/Logic Flaw

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure...

Odoo Database Backup Authentication Vulnerability

Odoo formerly known as OpenERP is an enterprise resource planning ERP and customer relationship management CRM system. The system is developed in Python language with PostgreSQL as the database and includes modules for sales management, inventory management and financial management. A security...

CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

K7 Antivirus Premium Information Disclosure Vulnerability

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53, which stems from a failure to adequately authenticate user input sent to the K7Sentry device. A local attacker could exploit the...

Disabling automatic password change for nonpersistent desktops

Computers use their machine account password for authentication with Active Directory. By default, computers are configured to change their machine account passwords every 30 days. This setting affects nonpersistent desktops in the following ways: 1. When you deploy the nonpersistent desktop, the...

Cookie Authentication Failed

This plugin is raised when the scanner has not been able to authenticate against the web application using the cookies provided in the scan policy. Check the output of the plugin to get an explanation of the issue encountered by the scan. No source data...

OpenMRS Remote Command Execution Vulnerability

OpenMRS Reference Application is a suite of open source EHR applications.Reporting Compatibility Add On is one of the compatibility reporting components. A remote command execution vulnerability exists in OpenMRS, which is caused by the application failing to authenticate the user when...

Authentication Failure When Password Contains £ Character

Authentication for 401 based failure is observed only oniOS devices ,when the password contains £ character, it works for Form based authentication. Authentication for 401 and Form based is working fine without any issue on Android devices ,when the password contains £ character. Coming to RADIUS...

XenMobile: Second Profile Installation Failed on iOS

Logs " 2017-09-05T16:09:55.988+0530 ",,ERROR 2,48-X1MDMEnrollFlowController createEnrollSessionblockinvoke,"request to create enrollment session unauthorized with 401",Active,com.apple.main-thread,403,Secure...

Multiple PDQ Products Privilege Acquisition Vulnerabilities

PDQ Manufacturing LaserWash G5 and others are automotive automatic cleaning equipment from PDQ Manufacturing, USA. web-server is one of the web servers. A security vulnerability exists in the web-server in several PDQ products due to the program failing to verify that the authentication informati...

Fedora 26 : php-symfony (2017-4fcbd8a4c3)

2.8.25 2017-07-17 - security 23507 Security validate empty passwords again xabbuh - bug 23526 HttpFoundation Set meta refresh time to 0 in RedirectResponse content jnvsor - bug 23540 Disable inlining deprecated services alekitto - bug 23468 DI Handle root namespace in service definitions ro0NL -...