MAL-2022-6027 Malicious code in service-bus-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31858bdcfbb3924248460b003094be153f39da14723789001495407f920c6b86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0430c5da0aed69e8440b355fa123049561313969a9ecc722dd25ee5a82db5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6028 Malicious code in service-bus-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f0430c5da0aed69e8440b355fa123049561313969a9ecc722dd25ee5a82db5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e1b8b529acee02d56796a94805118ff6b14c98a1ac6ef065cf6b472d87c602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6029 Malicious code in service-bus-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72e1b8b529acee02d56796a94805118ff6b14c98a1ac6ef065cf6b472d87c602 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79810924dd66fe9c776575518e9e717eed9422d73773cf4c0541041890df3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e8b972ae7ebe47ad31a4cfed964bf1308b4d910ddad0f713ef7e45af26dc43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5291 Malicious code in perf-service-bus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79810924dd66fe9c776575518e9e717eed9422d73773cf4c0541041890df3ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6026 Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8547c44f06dfc6fb52916c87e2955905a476cec2262b8d6c20a8930f3994712d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-110 Malicious code in @azure-tests/perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e70f370bad16f5c5f3b53ac78af981f9d14f1ebb6551b8bd8fda11f91a5171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event-bus-xp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c07adaaa07d3ae57c467363592ac7248926a1bcb8225dcca948c207ab59fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2890 Malicious code in event-bus-xp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c07adaaa07d3ae57c467363592ac7248926a1bcb8225dcca948c207ab59fca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: IBM Integration Bus is vulnerable to arbitrary code execution due to json-schema (CVE-2021-3918)

Summary IBM Integration Bus is vulnerable to arbitrary code execution due to json-schema. The fix includes json-schema 0.4.0. Vulnerability Details CVEID:CVE-2021-3918 DESCRIPTION: Json-schema could allow a remote attacker to execute arbitrary code on the system, caused by an improperly controlle...

GHSA-G63H-Q855-VP3Q Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users

Impact The /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to be kept in the EdgeX secret store and require authentication to access. This vulnerability bypasses the access controls on message b...

Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users

Impact The /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to be kept in the EdgeX secret store and require authentication to access. This vulnerability bypasses the access controls on message b...

DEBIAN-CVE-2022-20132

In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User...

UBUNTU-CVE-2022-20132

In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User...

CVE-2022-31066

EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...