4451 matches found
CVE-2023-30863
CVE-2023-30863 concerns the Connectivity Service and cites a missing permission check as the root cause. The vulnerability enables local escalation of privilege with no additional execution privileges, matching CVSS 3.1 metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base score 7.8). The connected ...
CVE-2023-30863
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
PT-2023-23019 · Unknown · Connectivity Service
Name of the Vulnerable Software and Affected Versions: Connectivity Service affected versions not specified Description: The issue is related to a possible missing permission check in the Connectivity Service. This could lead to local escalation of privilege with no additional execution privilege...
PT-2023-23018 · Unknown · Connectivity Service
Name of the Vulnerable Software and Affected Versions: Connectivity Service affected versions not specified Description: The issue is related to a possible missing permission check in the Connectivity Service. This could lead to local escalation of privilege with no additional execution privilege...
CVE-2023-30864: Missing Authorization
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2023-30863: Missing Authorization
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
Workspace error "Unable to connect to the server. Check your network connection and retry."
After adding Citrix Gateway URL on Workspace App and entering thecredentials, the users encounter the error "Unable to connect to the server. Check your network connection and retry."...
5 Must-Know Facts about 5G Network Security and Its Cloud Benefits
5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting smartphones and IoT devices to cloud infrastructure. 5G networks are a critical part of all infrastructure layers between the end user and t...
UBUNTU-CVE-2023-32697
SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2...
K000134671: Paramiko vulnerability CVE-2018-1000805
Security Advisory Description Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity. CVE-2018-1000805 Impact There is no impact; F5...
How to Reduce Exposure on the Manufacturing Attack Surface
Digitalization initiatives are connecting once-isolated Operational Technology OT environments with their Information Technology IT counterparts. This digital transformation of the factory floor has accelerated the connection of machinery to digital systems and data. Computer systems for managing...
NGINX Instance Manager Automation Platform Privilege Escalation
The vulnerabilities of the NGINX Instance Manager automation platform, the NGINX API Connectivity Manager for connection management, and the NGINX Security Monitoring platform are related to the improper use of standard permissions. Exploiting these vulnerabilities can allow attackers to increase...
NGINX Instance Manager Authentication Bypass
The vulnerabilities of the NGINX Instance Manager automation platform, the NGINX API Connectivity Manager, and the NGINX Security Monitoring platform involve exploiting authentication mechanisms by using user-controlled keys. Exploitation of these vulnerabilities could allow an attacker to bypass...
Aruba Networks EdgeConnect security vulnerabilities
Aruba Networks EdgeConnect is an edge connectivity management platform from Aruba Networks, USA. A security vulnerability exists in Aruba Networks EdgeConnect Enterprise. An attacker exploited the vulnerability to cause a data breach...
Apache Log4cxx SQL Injection Vulnerability
Apache Log4cxx is a C++ logging framework modeled after Apache log4j from the Apache Foundation. An SQL injection vulnerability exists in Apache Log4cxx versions prior to 1.1.0 that stems from not properly escaping fields sent to the database when using the ODBC add-in to send log messages to the...
How to Test Port Connectivity
Purpose This article documents how to test connectivity between two machines over a specific port. Product Service Ports Most connection errors involving ports in the 61xx, 93xx, 94xx, and 10xxx ranges are related to Veeam product services. Determine whether the port in the connection error is...
Vulnerabilities fixed in several F5 products
F5 has fixed several vulnerabilities in BIG-IP and NGINX. A remote malicious party can exploit the vulnerabilities in BIG-IP exploit them to cause a denial-of-service DOS on the Traffic Management Microkernel TMM subprocess. To do this, the vulnerable system must be configured with a specific UDP...
SQL ODBC Plugin DoS
The vulnerability of the SQL ODBC plugin for the cross-platform development framework for Qt software relates to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially created data...
CVE-2023-28724
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Default credentials
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...