CVE-2024-52321

Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker...

PT-2024-35176 · Sharp · Sharp Routers

Name of the Vulnerable Software and Affected Versions: SHARP routers affected versions not specified Description: The issue is related to an improper authentication vulnerability in the configuration backup function of SHARP routers. This vulnerability allows a remote unauthenticated attacker to...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 12 (6.0.1-113)

This update provides a stability fix. Vulnerability id: VSTOR-96085 A stability fix for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 5 (6.2.1-74)

This update provides stability fixes. Vulnerability id: VSTOR-96085, VSTOR-96883 Stability fixes for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.3 Hotfix 3 (6.3.0-183)

This update provides stability fixes. Vulnerability id: VSTOR-96085, VSTOR-96883 Stability fixes for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 10 (6.1.1-65)

This update provides a stability fix. Vulnerability id: VSTOR-96085 A stability fix for Backup Gateway...

CVE-2024-52321: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Multiple SHARP routers contain an improper authentication vulnerability in the configuration backup function. The product's backup files containing sensitive information may be retrieved by a remote unauthenticated attacker...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-56353

JetBrains TeamCity is affected by CVE-2024-56353. Before version 2024.12, backup files can disclose sensitive data, exposing user credentials and session cookies. Root cause is exposure via backup artifacts; impact is information disclosure with confidentiality at risk (credentials and cookies). ...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty may affect IBM Storage Protect Backup-Archive Client

Summary IBM Storage Protect Backup-Archive Client can be affected by security flaws in IBM WebSphere Application Server Liberty. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information, as described in the "Vulnerability...

PT-2024-9851 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12 Description: The issue is related to the exposure of user credentials and session cookies in backup files. This is due to incorrect removal of critical data. An attacker could exploit this to revea...

JetBrains TeamCity security vulnerabilities

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

Discourse 3.4.x < 3.4.0.beta4 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2024-56353: Improper Removal of Sensitive Information Before Storage or Transfer

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies...

CVE-2024-53991 Potential Backup file leaked via Nginx in Discourse

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore::LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...

CVE-2024-53991

Discourse backup file disclosure via default Nginx configuration (CVE-2024-53991) affects Discourse instances using FileStore::LocalStore for local uploads/backups. Attackers who know a backup filename can trick nginx into serving the backup file, exposing complete backups with sensitive data. Th...

CVE-2024-53991 Potential Backup file leaked via Nginx in Discourse

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore::LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...