CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

PT-2015-7260

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

CVE-2015-6468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6470: Undefined Security Weakness

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

PT-2015-7258

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendation...

Resource Data Management Privilege Escalation Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified two vulnerabilities in Resource Data Management’s Data Manager application. Resource Data Management has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS Resourc...

(0Day) F5 Data Manager discoverFilerBasicInfo.jsft filerName SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of F5 Data Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the discoverFilerBasicInfo.jsft page. An attacker is able to inject SQL through the...

F5 Networks ARX Data Manager Web Interface Detection

Binary data f5datamanagerdetect.nbin...

F5 Networks ARX Data Manager Unsupported Version Detection

The remote host is running F5 Networks ARX Data Manager. According to the vendor, this product is no longer supported and security fixes will not be released. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc';...

Sql injection

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2949

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2949

CVE-2014-2949 is a SQL injection vulnerability in F5 ARX Data Manager 3.0.0–3.1.0 web service. The issue allows an authenticated user to inject SQL and, per sources, may enable remote code execution on vulnerable installations. Affected product is ARX Data Manager (3.x) with web service exposed; ...

CVE-2014-2949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

F5 ARX Data Manager contains a SQL injection vulnerability

Overview F5 ARX Data Manager 3.0.0 - 3.1.0 contains a SQL injection vulnerability. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command F5 ARX Data Manager 3.0.0 - 3.1.0 contains an unspecified SQL injection vulnerability. --- Impact A remote authenticated attack...

SOL15310 - Data Manager SQL Injection Remote Code Execution vulnerability CVE-2014-2949

Vulnerability Recommended Actions To mitigate this vulnerability, you can stop the Data Manager Service when not in use. To do so, perform the following procedure: Impact of action: Performing the following procedure should not have a negative impact on your system. 1. Log in as admin to Data...

JP1/NETM/DM SubManager and JP1/NETM/DM Client Process Termination Vulnerability

Overview JP1/NETM/DM SubManager and JP1/NETM/DM Client, enabled with the JP1 event notification setting, have a process termination vulnerability where process may terminate when error occurs while receiving job execution requests. Impact A computer may not be able to receive job execution reques...

AIX Object Data Manager DoS

No description provided...

[SA13370] AIX Unspecified System Startup Scripts Vulnerability

TITLE: AIX Unspecified System Startup Scripts Vulnerability SECUNIA ADVISORY ID: SA13370 VERIFY ADVISORY: http://secunia.com/advisories/13370/ CRITICAL: Less critical IMPACT: Manipulation of data, DoS WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: A...