CVE-2021-43952

CVE-2021-43952 affects Atlassian Jira Server and Data Center. A cross-site request forgery (CSRF) vulnerability on /secure/admin/RestoreDefaults.jspa allows unauthenticated actors to restore the default configuration of fields. Affected versions are before 8.21.0. Connected documents corroborate ...

Atlassian Jira Service Management Server 和 Data Center 安全漏洞

Atlassian Jira Service is a server-based version of Atlassian Australia's IT service desk and request tracking system, which is used to receive, track and manage requests from team clients. An authorization issue vulnerability exists in Atlassian Jira Service Management Server, which stems from...

Atlassian Jira Server 和 Data Center 跨站请求伪造漏洞

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. The Atlassian Jira Server is vulnerable to cross-site request forgery, which stems from an application/secure/admin/ViewInstrumentation.jspa endpoint that does not adequately...

PT-2022-11940 · Atlassian +1 · Confluence +1

Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server and Data Center versions prior to 7.4.10 Atlassian Confluence Server and Data Center versions 7.5.0 through 7.12.3 Description: The issue allows authenticated local attackers to achieve elevated privileges on the...

VMware NSX-T 操作系统命令注入漏洞

Vmware NSX Data Center is a complete L2-L7 network and security virtualization platform from Vmware that provides virtualized networks for virtual machines, isolates virtual machines from the physical network, and makes network services independent of specific physical network devices, giving use...

VMSA-2022-0005:VMware NSX Data Center for vSphere update addresses CLI shell injection vulnerability

Advisory ID: VMSA-2022-0005.2 CVSSv3 Range: 8.8 Issue Date:2022-02-15 Updated On: 2022-04-07 CVEs: CVE-2022-22945 Synopsis: VMware NSX Data Center for vSphere update addresses CLI shell injection vulnerability CVE-2022-22945 RSS Feed Download PDF Download Text File Share this page on social media...

Binary vulnerability in Arista VEOS (CNVD-2022-18742)

Arista Networks is one of the leading manufacturers of networking equipment for large data centers, high performance computing systems and cloud networking solutions. A binary vulnerability exists in Arista VEOS, which can be exploited by attackers to cause a denial-of-service attack...

CVE-2022-22939

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...

CVE-2022-22939

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text within multiple log files on the SDDC Manager. A malicious actor with root access on VMware Cloud Foundation SDDC Manager may be able to view credentials in plaintext within one or...

Imperva is on Top of the World as it Announces New PoP in Bogotá

Imperva is on top of the world to announce the opening of our newest and highest data center yet in Bogotá, Colombia. This latest move represents our commitment as an organization to improve performance, security and connectivity for our customers in the Colombian market. In the very center of th...

Buffer Overflow Vulnerability in Multiple Huawei Products (CNVD-2022-17397)

The Huawei CloudEngine 12800 is a 12800 series data center switch, and the Huawei Cloudengine 5800 is a 5800 series data center switch. Buffer overflow vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of certain parameters in messages, which ca...

Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2022-17396)

Huawei CloudEngine 12800 is a 12800 series data center switch, Huawei Cloudengine 5800 is a 5800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data center switch, Huawei Cloudengine 6800 is a 6800 series data cente...

Huawei 多款产品缓冲区错误漏洞

The Huawei CloudEngine 12800 is a 12800 series data center switch, and the Huawei Cloudengine 5800 is a 5800 series data center switch. Buffer overflow vulnerability exists in several Huawei products. The vulnerability stems from insufficient validation of certain parameters in messages, which ca...

CVE-2021-43949

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view private objects via a Broken Access Control vulnerability in the Custom Fields feature. The affected versions are before version 4.21.0...

CVE-2021-43947

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution RCE vulnerability in the Email Templates feature. This issue bypasses the fix of https://jira.atlassian.com/browse/JSDSERVER-8665...

CVE-2021-43947

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution RCE vulnerability in the Email Templates feature. This issue bypasses the fix of https://jira.atlassian.com/browse/JSDSERVER-8665...

CVE-2021-43947

CVE-2021-43947 affects Atlassian Jira Server/Data Center: remote code execution via Email Templates, exploitable by an administrator. Affected versions are before 8.13.15 and 8.14.x before 8.20.3; remediation is to upgrade to 8.20.3 or later. The issue bypasses the JSDSERVER-8665 fix.

CVE-2021-43953

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery CSRF vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are befor...

Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05438)

Atlassian Jira is a defect tracking management system from Atlassian Australia. An access control error vulnerability exists in Atlassian Jira Server and Data Center due to an interruption access control vulnerability in /secure/EditSubscription.jspa, which can be exploited by a remote,...

PT-2022-11947 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.13.15, and versions 8.14.0 through 8.20.3. Description: The issue allows remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution RCE...