4688 matches found
CVE-2020-28053
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6...
CVE-2020-28053
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6...
CVE-2020-28421: Undefined Security Weakness
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
CVE-2020-28053: Incorrect Authorization
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6...
PT-2020-17008
Name of the Vulnerable Software and Affected Versions CA Unified Infrastructure Management versions 20.1 and earlier Description The issue allows local attackers to elevate privileges due to a vulnerability in the robot controller component. Recommendations For CA Unified Infrastructure Managemen...
PT-2020-16913
Name of the Vulnerable Software and Affected Versions HashiCorp Consul and Consul Enterprise versions 1.2.0 through 1.8.5 Description The issue allows operators with operator:read ACL permissions to read the Connect CA private key configuration. This is a problem of privilege escalation...
pki-core: Reflected XSS in getcookies?url= endpoint in CA
A Reflected Cross Site Scripting vulnerability was found in the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute...
redengine.lawsociety.sk.ca Cross Site Scripting vulnerability OBB-1477680
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ci-beverly-hills-ca.us Cross Site Scripting vulnerability OBB-1477307
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ubuntu: Security Advisory (USN-4608-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4608-1 ca-certificates update
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate authority bundle...
USN-4608-1: ca-certificates update
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate authority bundle...
PT-2020-22771
Name of the Vulnerable Software and Affected Versions ca-certificates affected versions not specified Description The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ca-certificates update (USN-4608-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4608-1 advisory. The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the...
CVE-2020-6364 — OS Command Injection Vulnerability in CA Introscope Enterprise Manager (Affected Products: SAP Solution Manager and SAP Focused Run)
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...
Code injection
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...
CVE-2020-6364
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...
CVE-2020-6364
CVE-2020-6364 affects SAP Solution Manager and SAP Focused Run. Exploitation allows an attacker to modify a cookie to execute OS commands, potentially gaining control of the host running CA Introscope Enterprise Manager and causing code injection, with read/modify of system files and impact to av...
PT-2020-19137
Name of the Vulnerable Software and Affected Versions SAP Solution Manager and SAP Focused Run versions prior to the update provided in WILY INTRO ENTERPRISE 9.7, 10.1, 10.5, 10.7 Description The issue allows an attacker to modify a cookie, enabling the execution of OS commands and potentially...
CVE-2020-6364: Improper Neutralization of Special Elements used in an OS Command
SAP Solution Manager and SAP Focused Run update provided in WILYINTROENTERPRISE 9.7, 10.1, 10.5, 10.7, allows an attacker to modify a cookie in a way that OS commands can be executed and potentially gain control over the host running the CA Introscope Enterprise Manager,leading to Code Injection...