534 matches found
CVE-2021-26991: Undefined Security Weakness
Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing CORS policy which could allow a remote attacker to interact with Cloud Manager...
PT-2021-17216
Name of the Vulnerable Software and Affected Versions: Cloud Manager versions prior to 3.9.4 Description: The issue allows a remote attacker to overwrite arbitrary system files. Recommendations: For Cloud Manager versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue...
PT-2021-17218
Name of the Vulnerable Software and Affected Versions: Cloud Manager versions prior to 3.9.4 Description: The issue allows a remote attacker to cause a Denial of Service DoS. Recommendations: For Cloud Manager versions prior to 3.9.4, update to version 3.9.4 or later to resolve the issue...
PT-2021-17217
Name of the Vulnerable Software and Affected Versions: Cloud Manager versions prior to 3.9.4 Description: The issue is related to an insecure Cross-Origin Resource Sharing CORS policy. This could allow a remote attacker to interact with Cloud Manager. CORS is a security feature that restricts web...
NetApp OnCommand Cloud Manager security vulnerabilities
NetApp Cloud Manager is a centralized system for viewing and managing local and cloud storage with support for hybrid, multi-cloud providers and accounts. A cross-domain resource sharing CORS vulnerability exists in NetApp Cloud Manager prior to version 3.9.4. The vulnerability stems from an...
Logic Flaw Vulnerability in Hsing Yun Butler
Line Cloud Manager is a cloud computing management platform launched by Shenzhen AoGuan Software Co. There is a logic flaw vulnerability in Hsing Yun Butler. Attackers can use it to bypass server authentication, reset account passwords, and obtain sensitive information...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Manager with OpenStack
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Cloud Manager with OpenStack. These issues were disclosed as part of IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability...
Security Bulletin: Multiple vulnerabilities in IBM® JDK, Java™ Technology Edition may affect IBM Cloud Manager with OpenStack
Summary A vulnerability in IBM® JDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. The CVE-2020-2590 and CVE-2020-2601 were disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details Refer to the security bulletins listed in th...
PT-2020-5936
Name of the Vulnerable Software and Affected Versions: MongoDB Cloud Manager, MongoDB Ops Manager, MongoDB Atlas Legacy Backups, and MongoDB affected versions not specified Description: The issue is related to the improper handling of mismatched special elements in the backup snapshot functionali...
Security Bulletin: IBM Cloud Manager with OpenStack is affected by a OpenSSL vulnerability (CVE-2020-1968)
Summary A security vulnerability has been identified in OpenSSL that is used by Chef. IBM Cloud Manager with OpenStack uses Chef and is affected by this vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
Security Bulletin: IBM Cloud Manager with OpenStack is affected by a OpenSSL vulnerability
Summary A security vulnerability has been identified in OpenSSL that is used by Chef. IBM Cloud Manager with OpenStack uses Chef and is affected by this vulnerability. Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information,...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Manager with OpenStack
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. These issues were disclosed as part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Manager with OpenStack
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. These issues were disclosed as part of the IBM Java SDK updates in October 2019. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified...
Security Bulletin: Vulnerability in IBM Java SDK affect IBM Cloud Manager with OpenStack (CVE-2020-2654)
Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. The issue is disclosed as a part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE...
Security Bulletin: Vulnerability in IBM Java SDK affect IBM Cloud Manager with OpenStack (CVE-2019-2949)
Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. The issue is disclosed as a part of the IBM Java SDK updates. Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An unspecified vulnerability in Java SE related to the...
Security Bulletin: Smart Cloud Entry is affected by ISC BIND vulnerabilities
Summary Multiple vulnerabilitieshave been identified in ISC BIND. ISC BIND shipped with IBM SmartCloud Entry Appliance. Vulnerability Details CVEID: CVE-2017-3142 DESCRIPTION: ISC BIND could allow a remote attacker to bypass security restrictions, caused by an error when an attacker can send and...
Security Bulletin: IBM Agile Lifecycle Manager is affected by an Apache Zookeeper vulnerability (CVE-2019-0201)
Summary IBM Agile Lifecycle Manager 2.1 has addressed the following vulnerability in Apache ZooKeeper. Vulnerability Details CVEID: CVE-2019-0201 DESCRIPTION: Apache ZooKeeper could allow a remote attacker to obtain sensitive information, caused by the failure to check permissions by the getACL...
NetApp OnCommand Cloud Manager Code Execution Vulnerability
NetApp OnCommand Cloud Manager is a suite of software from NetApp, Inc. that supports the deployment, management and tracking of Data Fabric resources across cloud environments. A security vulnerability exists in OnCommand Cloud Manager versions prior to 3.8.0. A remote attacker could exploit the...
