CVE-2018-12160

CVE-2018-12160 is a DLL injection vulnerability in Intel Data Center Migration Center Software installer (v3.1 and earlier). The issue allows an authenticated local user to execute code with default directory permissions due to improper installer permissions. Affected product/versions: Intel Data...

CVE-2018-3679

Intel Data Center Manager SDK (before 5.1) is affected by CVE-2018-3679. The issue is a privilege-escalation in the Reference UI that could allow an unauthorized remote unauthenticated user to potentially execute code with administrator privileges. The Intel advisory states CVSS v3.0 base score 9...

Intel® Data Center Manager SDK Advisory

Summary: Potential security vulnerability in Intel® Data Center Manager SDK may allow privilege escalation. Intel is releasing Intel® Data Center Manager updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3679 Description: Escalation of privilege in Reference ...

Cisco Cloud Services Platform 2100 Command Injection Vulnerability

Cisco Cloud Services Platform CSP 2100 is the United States Cisco Cisco company's set of hardware and software platform for data center network function virtualization. A command injection vulnerability exists in the web-based management interface of the Cisco CSP 2100, which stems from the...

Cisco Data Center Network Manager Elevation of Privilege Vulnerability

Cisco Data Center Network Manager DCNM is the management system for Cisco Unified Fabric. An elevation of privilege vulnerability exists in the web interface of Cisco Data Center Network Manager. The vulnerability stems from incomplete input validation of user input in HTTP requests. An attacker...

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

Cisco Data Center Network Manager is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A cross-site scripting vulnerability exists in the web-based management interface of...

Cisco Issues Security Patch Updates for 32 Flaws in its Products

Cisco today released thirty security patch advisory to address a total of 32 security vulnerabilities in its products, three of which are rated critical, including the recently disclosed Apache Struts remote code execution vulnerability that is being exploited in the wild. Out of the rest 29...

Retrieving IT Asset lists from NetBox via API

A little bit more about IT Asset Inventory of Internal Network, that your IT team can provide. I have recently worked with NetBox - an open source IP address management IPAM and data center infrastructure management DCIM solution developed by well-known cloud hosting provider DigitalOcean. It's n...

Cisco Data Center Network Manager Privilege Escalation to Underlying Operating System Vulnerability

A vulnerability in the web interface of Cisco Data Center Network Manager could allow an authenticated application administrator to execute commands on the underlying operating system with root-level privileges. The vulnerability is due to incomplete input validation of user input within an HTTP...

Remote code execution

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

Remote code execution

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6499

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6498

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6498

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6499

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6499

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6498 Micro Focus Container Deployment Foundation (CDF), Remote Code Execution

Remote Code Execution in the following products Hybrid Cloud Management Containerized Suite HCM2017.11, HCM2018.02, HCM2018.05, Operations Bridge Containerized Suite 2017.11, 2018.02, 2018.05, Data Center Automation Containerized Suite 2017.01 until 2018.05, Service Management Automation Suite...

CVE-2018-6498

CVE-2018-6498 describes Remote Code Execution in Micro Focus containerized products: Hybrid Cloud Management Containerized Suite (HCM2017.11, HCM2018.02, HCM2018.05), Operations Bridge Containerized Suite (2017.11, 2018.02, 2018.05), Data Center Automation Containerized Suite (2017.01–2018.05), S...

CVE-2018-6499

CVE-2018-6499 describes a Remote Code Execution vulnerability affecting multiple HPE/Software Group containerized and related suites, including Hybrid Cloud Management, Operations Bridge Containerized Suite, Data Center Automation, Service Management Automation, Service Virtualization (SV), Unifi...

Cisco Data Center Network Manager Directory Traversal Vulnerability

Cisco Data Center Network Manager is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. A directory traversal vulnerability exists in Cisco Data Center Network Manager, which...