Code injection

UNSUPPORTED WHEN ASSIGNED In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products tha...

CVE-2021-32571

CVE-2021-32571 affects OSS-RC systems (release 18B and older). The issue arises during data migration, where files containing usernames and passwords are left undeleted yet reside in folders accessible by top-privileged accounts. Impact is described as exposure to partially confidential data due ...

CVE-2021-32571

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

CVE-2021-32571: Incomplete Cleanup

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

PT-2021-19786 · Ericsson · Ericsson Network Manager +1

Name of the Vulnerable Software and Affected Versions: OSS-RC versions 18B and older Description: The issue affects OSS-RC systems during data migration procedures, where files containing usernames and passwords are left undeleted in folders accessible by top privileged accounts only. This issue...

CVE-2021-41616 Apache ddlutils 1.0 readobject vulnerability

Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that was intended for use when migrating database data with a SQL data type of BINARY, VARBINARY, LONGVARBINARY, or BLOB between databases using the ddlutils features. The BinaryObjectsHelper class was insecure and used...

Neo4j has unspecified vulnerabilities

Neo4j is a Java-based and fully ACID-compatible graph database from Neo4j, which supports data migration, add-ons, etc. A security vulnerability exists in Neo4j Graph Database versions 4.2 and 4.3, which stems from a failure to reset the security environment during certain transaction operations ...

Important: Red Hat Bug Fix Advisory: Migration Toolkit for Containers (MTC) 1.4.6 release advisory

The Migration Toolkit for Containers MTC 1.4.6 is now available. The Migration Toolkit for Containers MTC enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes A...

Intel Data Migration Privilege Escalation

The vulnerability of the Intel Data Migration application is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Intel Data Migration Software Elevation of Privilege Vulnerability

Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...

CVE-2020-0547

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0547

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0547

CVE-2020-0547 affects Intel® Data Migration Software versions 3.3 and earlier. The root cause is incorrect default permissions in the installer, enabling an authenticated user to potentially elevate privileges via local access. Public details from Intel’s advisory (Intel® Data Migration Software ...

CVE-2020-0547

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Fixes High-Severity Flaws in NUC, Discontinues Buggy Compute Module

Intel has stomped out high-severity flaws in its Next Unit Computing NUC mini PC firmware, and in its Modular Server MFS2600KISPP Compute Module. Overall, Intel addressed nine vulnerabilities across six products in its April security update – two of those being high-severity, and the rest being...

CVE-2020-0547: Incorrect Default Permissions

Incorrect default permissions in the installer for IntelR Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-5618

Name of the Vulnerable Software and Affected Versions IntelR Data Migration Software versions 3.3 and earlier Description The issue is related to incorrect default permissions in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Akamai's Prolexic Platform Completes Fifth Generation Upgrade

Akamai introduces new enhancements today to its Prolexic Routed purpose-built DDoS scrubbing service that reflect the changing nature of the threat landscape and capitalize on cloud functionality to enable maximum customer flexibility using newer deployment models. For anyone worried about DDoS...

Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master...