234 matches found
Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM InfoSphere Master Data Management
Summary IBM Initiate Master Data Service and IBM InfoSphere Master Data Management are vulnerable to multiple OpenSSL denial of service attacks and could allow access to sensitive information. Vulnerability Details CVEID: CVE-2016-2177 DESCRIPTION: OpenSSL is vulnerable to a denial of service,...
Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Master Data Management (CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)
Summary OpenSSL vulnerabilities were disclosed on Jun 11, 2015 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Master Data Management and has addressed the applicable CVEs provided by OpenSSL Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of...
Security Bulletin: Security vulnerability in Apache affects IBM InfoSphere Master Data Management (CVE-2016-1000031)
Summary IBM InfoSphere Master Data Management is vulnerable to a Novell NetIQ Sentinel issue and could allow a remote attacker to execute arbitrary code on the system. Vulnerability Details CVE-ID: CVE-2016-1000031 DESCRIPTION: Novell NetIQ Sentinel could allow a remote attacker to execute...
Code injection
IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...
CVE-2022-22410
IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...
Unauthorized Access Vulnerability in Seven Bulls Logkit Monitoring Center
Shanghai Seven Bulls Information Technology Co., Ltd. is a cloud computing and data service provider. An unauthorized access vulnerability exists in Seven Bulls Logkit Monitoring Center, which can be exploited by attackers to obtain sensitive information...
CVE-2022-22832
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request...
CVE-2022-22832
An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request...
CVE-2022-22832
Summary: CVE-2022-22832 affects Servisnet Tessa 0.0.2, where authorization data is exposed via an unauthenticated request to /data-service/users/. This is a privilege-escalation risk because information about users can be retrieved by any user, potentially enabling password data exposure in respo...
PT-2022-15700 · Servisnet · Servisnet Tessa
Name of the Vulnerable Software and Affected Versions: Servisnet Tessa version 0.0.2 Description: An issue was discovered where authorization data is available via an unauthenticated request to the "/data-service/users/" API endpoint. Recommendations: For Servisnet Tessa version 0.0.2, consider...
CVE-2021-40005
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40005
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40005
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality...
Design/Logic Flaw
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-40005
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect data confidentiality...
Huawei HarmonyOS HAL-Ril data service component out-of-bounds read vulnerability
Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the HAL-Ril data service component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit the vulnerability to compromise...
PT-2022-11129 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: Distributed data service affected versions not specified Description: The issue is related to a vulnerability in data access control within the distributed data service component. This could potentially impact data confidentiality if...
Huawei HarmonyOS Wearables Access Control Improper Vulnerability
Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper access control vulnerability in the Huawei HarmonyOS Wearables distributed data service component. An attacker could exploit this vulnerability to cause confidentiality to be compromised...
Huawei HarmonyOS Wearables 安全漏洞
Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper access control vulnerability in the Huawei HarmonyOS Wearables distributed data service component. An attacker could exploit this vulnerability to cause confidentiality to be compromised...
TwinOaks Computing CoreDX DDS 输入验证错误漏洞
TwinOaks Computing CoreDX DDS is a CoreDX DDS Data Distribution Service middleware. An input validation error vulnerability exists in TwinOaks Computing CoreDX DDS, which arises from the product's failure to efficiently handle incoming specialized data. An attacker could use this vulnerability to...