CVE-2022-29138 Windows Clustered Shared Volume Elevation of Privilege Vulnerability

...

CVE-2022-29134

Technical details about CVE-2022-29134 (affected products, root cause, exploitability, and fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2022-29134 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29123 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29123 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29123

Technical details for CVE-2022-29123 (Windows Clustered Shared Volume Information Disclosure) are not provided in the connected documents. The initial entry includes general descriptions, but no product/version/root-cause/impact/fix details are available here. Monitor for official updates.

CVE-2022-29122

Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.

CVE-2022-29122 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29120 Windows Clustered Shared Volume Information Disclosure Vulnerability

...

CVE-2022-29120

Technical details (affected product/component/version/root cause/fix) are not provided in the initial or connected documents. Monitor for official updates; no explicit remediation, exploit status, or CVE-risk details are present in the supplied sources.

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

Windows Clustered Shared Volume Elevation of Privilege Vulnerability

...

Windows Clustered Shared Volume Information Disclosure Vulnerability

...

PT-2022-2540 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Clustered Shared Volume versions affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Clustered Shared Volume CSV file system, which is caused by synchronization...

Vulnerabilities fixed in NetApp Clustered Data ONTAP

NetApp has released updates to fix vulnerabilities in several third-party components for Clustered Data ONTAP. The vulnerabilities are in OpenSSL, PHP, OpenSSH and Apache and enable a malicious party to cause a denial-of-service cause, gain access to sensitive data and potentially manipulate data...

Vulnerability discovered in NetApp Clustered Data ONTAP

NetApp has discovered a vulnerability in Clustered Data ONTAP. The vulnerability is located in the version of the provided tool Expat and allows a malicious party to gain access to sensitive data, potentially to manipulate it, or to cause a Denial-of-Service. NetApp has not released any updates a...

Security Bulletin: SMB vulnerabilities in IBM N Series Products

Summary Data ONTAP products implement the SMB protocol. Systems that implement the SMB protocol can be susceptible to one or more man-in-the-middle attacks which when exploited could potentially lead to information disclosure, privilege escalation, or a Denial of Service. Vulnerability Details...

jetty: SessionListener can prevent a session from being invalidated breaking logout

A flaw was discovered in the jetty-server, where if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts, this could result in a session not being...

jetty: SessionListener can prevent a session from being invalidated breaking logout

A flaw was discovered in the jetty-server, where if an exception is thrown from the SessionListenersessionDestroyed method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts, this could result in a session not being...