CVE-2019-18574

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could th...

Cross site scripting

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could th...

CVE-2019-18574

RSA Authentication Manager versions prior to 8.4 Patch 8 (8.4.0.8) are affected by a stored cross-site scripting vulnerability in the Security Console. An authenticated Security Console administrator can store arbitrary HTML/JavaScript through the web interface, which may be included in a report ...

CVE-2019-18574

RSA Authentication Manager software versions prior to 8.4 P8 contain a stored cross-site scripting vulnerability in the Security Console. A malicious Security Console administrator could exploit this vulnerability to store arbitrary HTML or JavaScript code through the web interface which could th...

The vulnerability of the JunOS operating system, related to the logging of authentication data in an open manner, allows a perpetrator to obtain account information.

The vulnerability of the JunOS operating system’s port control console is related to the logging of authentication credentials in an open manner. Exploiting this vulnerability allows a perpetrator to obtain these credentials...

How to create IAM Policy

Please refer to: How to create an IAM policy in the AWS Management Console If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case. To submit feedback regarding this article, please click this link: Send Article Feedback...

CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

Command injection

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

CVE-2019-19469

CVE-2019-19469 affects Zmanda Management Console (ZMC) 3.3.9. The vulnerability is a CSRF flaw in ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= that can enable command injection via shell metacharacters, with potential reliance on weak default credentials. Exploitation is demonstrated/...

CVE-2019-19469

In Zmanda Management Console 3.3.9, ZMCAdminAdvanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters. This may depend on weak default credentials...

Zmanda Management Console Cross-Site Request Forgery Vulnerability

Zmanda Management Console ZMC is a management console program for connecting to, and managing, the Zmanda Cloud from Zmanda USA. A cross-site request forgery vulnerability in Zmanda ZMC version 3.3.9 can be exploited by an attacker to execute arbitrary code on a server using the Zmanda Management...

PT-2019-6677 · Red Hat · Jboss Application Server

Name of the Vulnerable Software and Affected Versions: JBoss Application Server versions prior to 7.1.0 Beta 1 Description: A DOM based cross-site scripting flaw was found in the administration console of the JBoss Application Server. A remote attacker could provide a specially-crafted web page a...

Linux kernel vcsu device write access vulnerability

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A write access vulnerability exists in the Linux kernel vcsu device. The vulnerability stems from the fact that...

PT-2019-6678 · Red Hat · Jboss Application Server

Name of the Vulnerable Software and Affected Versions: JBoss Application Server versions prior to 7.1.0 Description: A CSRF issue was found in JBoss Application Server, where it did not properly restrict access to the management console information. This can be exploited via the...

CVE-2019-15704

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

Information disclosure

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

CVE-2019-15704

A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway...

IBM WebSphere eXtreme Scale Admin Console Cross Site Scripting Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication, and management of application data and business logic across multiple servers.Admin Console is one of the management console programs. A cross-site scriptin...

IBM WebSphere eXtreme Scale Admin Console Information Disclosure Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication, and management of application data and business logic across multiple servers.Admin Console is one of the management console programs. An information...

IBM WebSphere eXtreme Scale Admin Console Clickjacking Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution from IBM USA. The product supports dynamic caching, partitioning, replication, and management of application data and business logic across multiple servers.Admin Console is one of the management console programs. A security...