4406 matches found
R7-2017-03: Improper Access Control of Fuze Meeting Recordings (FIXED)
This post describes a security vulnerability in the Fuze collaboration platform, and the mitigation steps that have been taken to correct the issue. The Fuze collaboration platform did not require authentication to access meeting recordings CWE-284. Shortly after being informed of this issue, Fuz...
Fuze Patches Bug That Exposed Recordings of Private Business Meetings
Fuze, an enterprise-grade voice and video collaboration platform, has patched a vulnerability that exposed recordings of private meetings. A fix was made server-side by Fuze, and a patch was pushed to its endpoint client apps within 11 days of being privately notified by researchers at Rapid7...
Lack of Communication Achilles' Heel for Ransomware Fighters
BOSTON—Collaboration is important when it comes to fighting ransomware, but the lack of communication around the issue remains a serious impediment, law enforcement says. “If we don’t know about it and no one keeps track of it, then no one cares,” Frank McLaughlin, a detective with the Boston...
Arbitrary File Upload Vulnerability in Cicada Knowledge Enterprise Portal System and Ranzhi Collaboration Management System
Cicada Knowledge Enterprise Portal System is a website content management system, and Ranch Coworking Management System is an enterprise coworking system. An arbitrary file upload vulnerability exists in Cicada Knowledge Enterprise Portal and Ranzhi Collaboration Management System, which can be...
Override vulnerability in the remove parameter of Cicada Knowledge Enterprise Portal and Ranch Collaboration Management System.
Cicada Knowledge Enterprise Portal System is a website content management system, and Ranch Coworking Management System is an enterprise coworking system. An override vulnerability exists in the remove parameter of Cicada Knowledge Enterprise Portal System and Ranzhi Collaboration Management...
CVE-2017-3057
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution...
CVE-2017-3057
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution...
CVE-2017-3043
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality...
CVE-2017-3043
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality...
Design/Logic Flaw
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution...
Memory corruption
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality...
CVE-2017-3043
Adobe Acrobat Reader (Windows/macOS) versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier are affected by a memory address leak in the collaboration feature (CVE-2017-3043). The connected sources confirm the same CVE entry is associated with these builds; no exploitati...
CVE-2017-3057
CVE-2017-3057 concerns Adobe Reader/Acrobat in Windows/macOS/Linux where vulnerable builds before certain version points—Adobe Acrobat Reader 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier—exhibit an exploitable use-after-free in the JavaScript API used for collaboration....
CVE-2017-3057
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in the JavaScript API related to the collaboration functionality. Successful exploitation could lead to arbitrary code execution...
CVE-2017-3043
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the collaboration functionality...
Open Atrium - Moderately critical - Information Disclosure - SA-CONTRIB-2017-041
Open Atrium is a distribution the enables collaboration sites to be built. It contains several custom modules to provide various functionality. While content is often protected behind private groups, public content can also be shared. When using Open Atrium as an internal Intranet, this "public"...
Nextcloud OCS API Elevation of Privilege Vulnerability
Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An elevation of privilege vulnerability exists in Nextcloud Server versions prior to 9.0.55 and prior to 10.0.2. An...
Microsoft is Shutting Down CodePlex, Asks Devs To Move To GitHub
Microsoft has announced to shut down CodePlex -- its website for hosting repositories of open-source software projects -- on December 15, 2017. Launched in 2006, CodePlex was one of the Microsoft's biggest steps towards the world of open source community -- where any programmer, anywhere can shar...