PT-2022-7817 · Red Hat · Openshift Origin

Name of the Vulnerable Software and Affected Versions: Openshift Origin version 3 Description: The issue is related to insecure cookies being set in the console of Openshift Origin. Specifically, the cookies lack 'secure' and 'HttpOnly' attributes. Recommendations: For Openshift Origin version 3,...

Information Disclosure

github.com/heroiclabs/nakama is vulnerable to information disclosure. The vulnerability exists because the unsuccessful login attempts on the console are not properly restricted which allows an attacker to make brute-force attacks and gain access to user account details...

GHSA-8R94-4H3C-939F Improper Restriction of Excessive Authentication Attempts

Nakama Console does not enforce any limit for the number of unsuccessful login attempts...

Improper Restriction of Excessive Authentication Attempts

Nakama Console does not enforce any limit for the number of unsuccessful login attempts...

CVE-2022-31770

IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221...

CVE-2022-31770

IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221...

Design/Logic Flaw

IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221...

FortiEDR - Cross Site Scripting (XSS) vulnerabilities over the Management Console

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiEDR Central Manager may allow a remote authenticated attacker to perform a reflected cross site scripting attack XSS via injecting a malicious payload into the Management Console through various endpoints...

CVE-2022-31770

IBM App Connect Enterprise Certified Container 4.2 could allow a user from the administration console to cause a denial of service by creating a specially crafted request. IBM X-Force ID: 228221...

CVE-2017-20121

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the...

CVE-2017-20121

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the...

Design/Logic Flaw

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the...

CVE-2017-20121 Teradici Management Console Database Management privileges management

A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Database Management. The manipulation leads to improper privilege management. It is possible to launch the attack on the...

CVE-2017-20121

CVE-2017-20121 affects Teradici Management Console 2.2.0, specifically the unknown functionality in the Database Management component. The root cause is described as manipulation that leads to improper privilege management, enabling a local attacker to launch the attack on the host. Publicized ex...

Teradici Management Console 安全漏洞

Teradici Management Console is a management console from Teradici Canada Inc. It enables IT administrators to easily manage, monitor and scale PCoIP Zero Clients and Remote Workstation Cards in their deployments. A security vulnerability exists in Teradici Management Console version 2.2.0 that...

CVE-2022-2256

A Stored Cross-site scripting XSS vulnerability was found in keycloak. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality...

AHV clusters with AOS versions 5.20.4+ (LTS) or 6.1.1+ (STS) shown as unavailable in Veeam Console

Challenge If the machine where Veeam Backup & Replication is installed is running Windows Server 2012R2 OS or earlier, and the Nutanix AHV Clusters are running AOS versions 5.20.4+ LTS or 6.1.1+ STS, the following may occur: Nutanix Clusters that were previously added to Veeam Backup & Replicatio...

nodejs: Prototype pollution via console.table properties

Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...

WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)

Exploit Title: WSO2 Management Console Multiple Products - Unauthenticated Reflected Cross-Site Scripting XSS Date: 21 Apr 2022 Exploit Author: cxosmo Vendor Homepage: https://wso2.com Software Link: API Manager https://wso2.com/api-manager/, Identity Server https://wso2.com/identity-server/,...

WSO2 Management Console (Multiple Products) - Unauthenticated Reflected XSS Exploit

Exploit Title: WSO2 Management Console Multiple Products - Unauthenticated Reflected Cross-Site Scripting XSS Exploit Author: cxosmo Vendor Homepage: https://wso2.com Software Link: API Manager https://wso2.com/api-manager/, Identity Server https://wso2.com/identity-server/, Enterprise Integrator...