CVE-2019-10221

A Reflected Cross Site Scripting vulnerability was found in the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute...

CVE-2019-10146

A Reflected Cross Site Scripting flaw was found in the pki-ca module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser...

Huawei EulerOS: Security Advisory for pki-core (EulerOS-SA-2017-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 31 : ocsinventory-agent (2020-4c8a066b83)

Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempte...

ca-pca.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1068453 Security Researcher fakessh Helped patch 1840 vulnerabilities Received 9 Coordinated Disclosure badges Received 60 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting ca-pca.net website and its...

EulerOS Virtualization for ARM 64 3.0.5.0 : python-urllib3 (EulerOS-SA-2020-1084)

According to the version of the python-urllib3 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is...

CVE-2019-19544

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...

CVE-2019-19518

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

CVE-2019-19518

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

Design/Logic Flaw

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

CVE-2019-19544

CA Automic Dollar Universe 5.3.3 contains a local privilege escalation vulnerability related to the uxdqmsrv binary being setuid root. An attacker with local access can exploit this to elevate privileges. The issue is tied to the 5.3.3 version, which reached End of Life on 2015-04-01. The availab...

CVE-2019-19544

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...

CVE-2019-19518

CVE-2019-19518 affects Broadcom CA Automic Sysload 5.6.0 through 6.1.2. The root cause is a lack of authentication on the File Server port, which potentially allows remote attackers to execute arbitrary commands. Public sources (NVD/Red Hat/Symantec) confirm the affected versions and the arbitrar...

CVE-2019-19518

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

PT-2020-10179

Name of the Vulnerable Software and Affected Versions CA Automic Sysload versions 5.6.0 through 6.1.2 Description The issue is related to a lack of authentication on the File Server port, which potentially allows remote attackers to execute arbitrary commands. Recommendations For versions 5.6.0...

CVE-2019-19518: Improper Authentication

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

CVE-2019-19544: Improper Privilege Management

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...

PT-2020-10182

Name of the Vulnerable Software and Affected Versions CA Automic Dollar Universe version 5.3.3 Description The issue is related to the uxdqmsrv binary being setuid root, which allows local attackers to elevate privileges. This was reported to CA several years after the product reached End of Life...

geoedmonton2018.ca Cross Site Scripting vulnerability

Security Researcher KhanJanny Helped patch 2643 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting geoedmonton2018.ca website and its users. Following...

geostjohns2019.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1051229 Security Researcher KhanJanny Helped patch 3054 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting geostjohns2019.ca websit...