Information disclosure

Microsoft Failover Cluster Information Disclosure Vulnerability...

CVE-2023-32083

CVE-2023-32083 is described in the documents as a Windows Failover Cluster Information Disclosure vulnerability, with impact stated as access to sensitive data. The connected sources do not provide explicit technical root cause details or a specific remediation patch/version for this CVE. Action:...

CVE-2023-32083 Microsoft Failover Cluster Information Disclosure Vulnerability

...

CVE-2023-32083 Microsoft Failover Cluster Information Disclosure Vulnerability

...

CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability

...

CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability

...

CVE-2023-32033

CVE-2023-32033: Microsoft Failover Cluster Remote Code Execution vulnerability with CVSS v3.1 base score 7.2 (HIGH). Attack vector is NETWORK, no user interaction, with confidentiality, integrity, and availability impacts all HIGH. Initial description confirms the affected vector but does not spe...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Support, and Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Microsoft Failover Cluster Remote Code Execution Vulnerability

...

Microsoft Failover Cluster Information Disclosure Vulnerability

...

Microsoft Windows Cluster Server 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Cluster Server. An attacker exploiting this vulnerability could remotely execute code. The following products and...

KB5028224: Windows Server 2008 R2 Security Update (July 2023)

The remote Windows host is missing security update 5028224. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

Microsoft Windows Failover Cluster 安全漏洞

The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. A security vulnerability exists in Microsoft Windows...

PT-2023-3525 · Microsoft · Failover Cluster +1

Name of the Vulnerable Software and Affected Versions: Microsoft Failover Cluster affected versions not specified Description: The issue is related to insufficient input validation in the Failover Cluster component of Windows operating systems. This allows a remote attacker to execute arbitrary...

PT-2023-3844 · Microsoft · Windows Failover Cluster +1

Name of the Vulnerable Software and Affected Versions: Windows Failover Cluster affected versions not specified Description: The issue is related to information disclosure in the Failover Cluster component of Windows operating systems. It allows a remote attacker to gain unauthorized access to...

KB5028226: Windows Server 2008 Security Update (July 2023)

The remote Windows host is missing security update 5028226. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

OESA-2023-1416 kubernetes security update

Container cluster management. Security Fixes: Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are...

Graylog user session is still usable after logout

Summary In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Details Each node maintains an in-memory cache of user sessions. Upon a cache-miss, the session is loaded from the...

Policy Bypass

github.com/kubernetes/kubernetes is vulnerable to Policy Bypass. The vulnerability exists in serviceaccount/admission.go, when ephemeral containers are used, which allows malicious users to start containers using restricted images, impacting the cluster if the ServiceAccount admission plugin is...