Authentication flaw

On all 7.x and 6.x versions fixed in 8.0.0, BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. Note: Software versions which have reached End of Software Development...

ai.h2o:h2o-clustering (>=3.32.1.1 <=3.44.0.2), ai.h2o:h2o-k8s (>=3.30.0.2 <=3.44.0.2) +3 more potentially affected by CVE-2020-13697 via org.nanohttpd:nanohttpd-nanolets (=2.3.1)

org.nanohttpd:nanohttpd-nanolets MAVEN version =2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.nanohttpd:nanohttpd-nanolets and may be impacted: - ai.h2o:h2o-clustering =3.32.1.1, =3.30.0.2, =3.34.0.3, =0.3.0, =2.0, =2.5 Source cves:...

IBM MQ 7.1 <= 7.1.0.9 / 7.5 <= 7.5.0.9 / 8.0 <= 8.0.0.11 / 9.0 <= 9.0.0.6 LTS / 9.1 <= 9.1.0.2 LTS / 9.1.1 <= 9.1.2 CD (876772)

The version of IBM MQ Server running on the remote host is affected by a vulnerability. IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering...

August 11, 2020—KB4571746 (Security-only update)

None None...

June 9, 2020—KB4561621 (OS Build 17134.1550)

None None...

Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by an error within the clustering code. (CVE-2019-4568)

Summary An error within the IBM MQ Clustering code could cause a denial of service attack by preventing cluster channels from starting. Vulnerability Details CVEID: CVE-2019-4568 DESCRIPTION: IBM MQ could allow a remote attacker with intimate knowledge of the server to cause a denial of service...

CVE-2019-4141

IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337...

Memory corruption

IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337...

CVE-2019-4141

CVE-2019-4141 affects IBM WebSphere MQ and IBM MQ appliances. A memory leak in the clustering code leads to a denial-of-service condition. Affected versions include: WebSphere MQ 7.1.0.0–7.1.0.9, MQ 7.5.0.0–7.5.0.9, MQ 8.0.0.0–8.0.0.11, MQ 9.0.0.0–9.0.0.6, MQ 9.1.0.0–9.1.0.2, and MQ 9.1.1–9.1.2. ...

CVE-2019-4141

IBM MQ 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.9, 8.0.0.0 - 8.0.0.11, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.1 - 9.1.2 is vulnerable to a denial of service attack caused by a memory leak in the clustering code. IBM X-Force ID: 158337...

PT-2019-16922 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 7.1.0.0 through 7.1.0.9 IBM MQ versions 7.5.0.0 through 7.5.0.9 IBM MQ versions 8.0.0.0 through 8.0.0.11 IBM MQ versions 9.0.0.0 through 9.0.0.6 IBM MQ versions 9.1.0.0 through 9.1.0.2 IBM MQ versions 9.1.1 through 9.1.2...

Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a denial of service attack caused by a memory leak in the clustering code. (CVE-2019-4141)

Summary A vulnerability was found in the clustering code that caused a memory leak. This could be exploited by an attacker to execute a denial of service attack against a queue manager. Vulnerability Details CVEID: CVE-2019-4141 DESCRIPTION: IBM MQ is vulnerable to a denial of service attack caus...

Firmware Slap - Discovering Vulnerabilities In Firmware Through Concolic Analysis And Function Clustering

Firmware slap combines concolic analysis with function clustering for vulnerability discovery and function similarity in firmware. Firmware slap is built as a series of libraries and exports most information as either pickles or JSON for integration with other tools. Slides from the talk can be...

CVE-2016-10826

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...

CVE-2016-10826

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...

Authentication flaw

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...

CVE-2016-10826

CVE-2016-10826 affects cPanel preceding 55.9999.141, where attackers can bypass two‑factor authentication via DNS clustering requests (SEC-93). The Red Hat/CNVD/NVD entries corroborate the vulnerability description and affected version. Remediation noted in public records is to upgrade to 55.9999...

CVE-2016-10826

cPanel before 55.9999.141 allows attackers to bypass Two Factor Authentication via DNS clustering requests SEC-93...

CVE-2019-4381

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159...

Design/Logic Flaw

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159...