Infinova Swann SWWHD-INTCAM-HD Information Disclosure Vulnerability

The Infinova Swann SWWHD-INTCAM-HD is a webcam from Infinova USA. An information disclosure vulnerability exists in Infinova Swann SWWHD-INTCAM-HD. The vulnerability arises from a configuration or other error in the operation of a network system or product. An unauthorized attacker could exploit...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-14590)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

The vulnerability of the coTURN server, related to configuration errors, allows attackers to compromise data integrity.

The vulnerability of the coTURN server is related to a configuration error that causes external traffic to be redirected to the backend interface of its own host. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the library package responsible for performing security transformations using GOST algorithms in the Astra Linux operating system allows a perpetrator to trigger a service failure. This vulnerability is related to a configuration error in the package.

The vulnerability of the library package responsible for performing security transformations based on GOST algorithms in the Astra Linux operating system is related to a configuration error in the package. This error causes the security transformation to be enabled automatically during package...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

The vulnerability of the SoMachine Basic software, related to configuration errors, allows a perpetrator to execute SoMachine.

The vulnerability of the SoMachine Basic software is related to configuration errors. Exploiting this vulnerability allows a remote attacker to execute SoMachine by sending specially crafted Ethernet messages...

"Cannot complete request" when logging on via NetScaler using dual factor authentication and SSON to StoreFront Server 3.14

After configuring a remote portal with StoreFront servers load balanced with NetScaler, a user authenticates and they get the error "Cannot complete your request". From the event Viewer logs of the StoreFront SF server: "An error occurred while using SSL configuration for endpoint 0.0.0.443. The...

Volume groups created by proxy got stuck in UI

Challenge When a Veeam Backup for Nutanix AHV backup job fails unexpectedly, or the backup proxy appliance is powered off for some reason manual power-off, hypervisor host crash, or any unexpected failure, you may get the volume groups created for backup purposes left in Prism Element and not...

StoreFront 3.5 upgrade to 3.15 fails with error " Citrix StoreFront 3.15.0.18019 failed"

StoreFront Version 3.5 fails to upgrade to version 3.15, during the upgrade process the wizard displays the following message "Citrix StoreFront 3.15.0.18019 failed" At the bottom of the upgrade wizard window, another message is displayed "NOTE: An error occurred during installation. Please ensur...

WEM Admin console error: "A valid license server with appropriate licenses needs to be configured"

When attempting to connect to infrastructure services using the WEM Administration Console, the following error is seen: A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management...

Quick tip: Watch out — restriction by location can be circumvented.

by @Andrey Danau, Wallarm Research If you are like many app developers, you may be using nginx or apache proxy or a web server on the front end of your application. If you are on a tight schedule, it is tempting to tie authorization and data controls simply to the locations defined in the front...

vulners.com: [vulners.com] nginx alias_traversal

Incorrect configuration of alias could allow an attacker to read file stored outside the target folder. https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Уязвимость только в конфигурации http, на https такого нет. Пример: http GET /static../monit/COPYING HTTP/1.1 Host:...

The vulnerability in the Hawtio web console of the Apache ActiveMQ software platform allows a perpetrator to obtain confidential information or exert other effects.

The vulnerability of the Hawtio web console of the Apache ActiveMQ software platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or exert other unauthorized actions...

Windows SMB Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the default Windows SMB Server configuration which allows anonymous users to remotely access certain named pipes that are also configured to allow anonymous access to users who are logged on locally. An unauthenticated attacker who successfully...

'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists' App Layering/Unidesk 2.x: Desktop Task Fails

Desktop edit fails with 'Couldn't find the current boot disk in the list of disk' or 'A configuration error exists'. Note, "A configuration error exists" could also apply to an inconsistent snapshot configuration on the VM, so see this KB article as well...

The vulnerability of the Android CAF-release operating system, related to configuration errors, allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android CAF-release operating system is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when loading the external application QTEE...

CVE-2017-11173

Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net as well as...

Ghost to reproduce: part of the WiMAX routing device to authenticate the existence of the bypass and back door vulnerability-vulnerability warning-the black bar safety net

The SEC's security personnel in some of the WiMAX router on found a vulnerability, this vulnerability allows an attacker to change the router administrator password, and then get on the vulnerabilities of the device control. Worse, if an attacker took control of these contains a vulnerability in...

Citrix Director: Could Not Establish Trust Relationship for the SSL/TLS Secure Channel

Director display in License Server section Cannot retrieve the data. Data source unresponsive due to configuration error. View Director server event logs for further information Checking the Application event log on the server running Director- logs event error: Event ID: 8 Level: Error Source:...

"This account is already added. Please select another account to add or press the close button" While Configuring Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. When customer attempts to configure Receiver, he gets an error: This account is already added. Pleas...