Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix (CVE-2017-1151, CVE-2017-1137, CVE-2017-1194 )

Summary There is a potential privilege escalation vulnerability in traditional WebSphere Application Server when using the OpenID Connect OIDC Trust Association Interceptor TAI. This does not affect WebSphere Application Server Liberty. There is a potential for weaker than expected security with...

Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1137)

Summary There is a potential for weaker than expected security with the Administrative Console in WebSphere Application Server. Vulnerability Details Consult the security bulletin: Security Bulletin: Potential security vulnerability in WebSphere Application Server Administrative Console for...

Security Bulletin: Security vulnerability affects IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server on Cloud

Summary There is a potential cross-site scripting vulnerability in the Admin Console of WebSphere Application Server. Vulnerability Details Please consult the security bulletin for vulnerability details and information about fixes: Security Bulletin: Potential Cross-site scripting vulnerability i...

Security Bulletin: Potential security vulnerability in WebSphere Application Server Administrative Console (CVE-2017-1137)

Summary There is a potential for weaker than expected security with the Administrative Console in WebSphere Application Server. Vulnerability Details CVEID: CVE-2017-1137 DESCRIPTION: IBM WebSphere Application Server could provide weaker than expected security. A remote attacker could exploit thi...

Security Bulletin: Potential cross-site scripting in the Admin Console for IBM WebSphere Application Server shipped with IBM PureApplication System (CVE-2016-8934)

Summary IBM WebSphere Application Server is shipped as a component of IBM PureApplication System. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin Potential cross-si...

Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server on Cloud

Summary There is a potential cross-site scripting vulnerability in the Admin Console for WebSphere Application Server. There is a potential information disclosure in WebSphere Application Server using malformed SOAP requests on WebSphere Application Server. Vulnerability Details Please consult th...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Enterprise Service Bus (CVE-2016-8934)

Summary WebSphere Application Server is shipped as a component of WebSphere Enterprise Service Bus. Information about the security vulnerabilities affecting WebSphere Application Server has been published in a security bulletin Vulnerability Details Please consult the security bulletin Potential...

Security Bulletin: Vulnerability identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2016-8934)

Summary IBM WebSphere Application Server is shipped as a component of IBM WebSphere Service Registry and Repository. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security...

Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server and WebSphere Lombardi Edition (CVE-2016-8934)

Summary WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, and WebSphere Lombardi Edition. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability...

Security Bulletin: Potential cross-site scripting in the Admin Console for WebSphere Application Server (CVE-2016-8934)

Summary There is a potential cross-site scripting vulnerability in the Admin Console for WebSphere Application Server. Vulnerability Details CVEID: CVE-2016-8934 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Applciation Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud

Summary There is an information disclosure vulnerability in IBM WebSphere Application Server Liberty for any users of the JAX-RS API. Apache Struts vulnerabilities affect WebSphere Application Server Administration Console. Vulnerability Details Please consult the security bulletins for...

Security Bulletin: Information Disclosure in IBM WebSphere Application Server in the Admin Console (CVE-2016-0377)

Summary There is an Information Disclosure Vulnerability in IBM WebSphere Application Server that affects the Administrative Console. Vulnerability Details CVEID: CVE-2016-0377 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information caused by th...

Security Bulletin: : The WebSphere eXtreme Scale 7.1.0 and 7.1.1 monitoring console lacks protection for various vulnerabilities. (CVE-2015-2025 CVE-2015-2026 CVE-2015-2027 CVE-2015-2028 CVE-2015-2029 CVE-2015-2030 CVE-2015-2031)

Summary These vulnerabilities in the WebSphere eXtreme Scale monitoring console may allow an attacker to gain access to the monitoring console, getting read/only access to statistics data on grid usage. Vulnerability Details CVEID: CVE-2015-2025 DESCRIPTION: IBM WebSphere Extreme Scale could allo...

Security Bulletin: IBM Operational Decision Manager : CVE-2014-0944, CVE-2014-0945, CVE-2014-0946

Summary This Security Bulletin addresses 3 security vulnerabilities CVE-2014-0944, CVE-2014-0945 and CVE-2014-0946 in IBM Operational Decision Manager. All issue are related to the RES Console provided in Rule Execution Server. Vulnerability Details CVE ID: CVE-2014-0944 DESCRIPTION: IBM...

WEM Admin console error: "A valid license server with appropriate licenses needs to be configured"

When attempting to connect to infrastructure services using the WEM Administration Console, the following error is seen: A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management...

CVE-2018-12323

An issue was discovered on Momentum Axel 720P 5.1.8 devices. A password of EHLGVG is hard-coded for the root and admin accounts, which makes it easier for physically proximate attackers to login at the console...

Unable to Connect Veeam Service Provider Console to Veeam Cloud Connect Server Using a Local Account

Challenge Attempting to connect a Veeam Cloud Connect server through the VSPC web UI using a local account fails with the following error message: Failed to connect to the server. Specified user is invalid or does not have enough permissions on the server. Copy Cause The remote connection was...

Cisco AppDynamics App iQ Platform SQL Injection Vulnerability

Cisco AppDynamics App iQ Platform is a real-time application and business performance monitoring solution from Cisco. A SQL injection vulnerability exists in the Enterprise Console in versions prior to Cisco AppDynamics App iQ Platform 4.4.3.10598 HF4. A remote attacker could exploit the...

CVE-2018-5167

The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks in their output. Web sites should not be able to directly link to internal chrome pages. Additionally, the JavaScript debugger will display...

CVE-2018-5167

The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks in their output. Web sites should not be able to directly link to internal chrome pages. Additionally, the JavaScript debugger will display...