CVE-2023-22515

CVE-2023-22515: Confluence Data Center & Server 권한 상승 취약점 분석 보고서 1. 개요 Overview CVE-2023-22515는 Atlassian Confluence Data Center 및 Server 제품에서 발견된 치명적인Critical Broken Access Control 취약점입니다. 공격자는 인증되지 않은 상태에서 원격으로 서버의 초기 설정 과정을 재활성화하고, 이를 통해 새로운 관리자 계정을 생성하여 시스템을 완전히 장악할 수 있습니다. CVE ID :...

FreeIPA 4.10.1 Denial Of Service / Information Disclosure

Summary: Specially crafted HTTP requests can read files in the DC server. And use keytab files for authorization for different kerberos principals. Tested FreeIPA version: ipa-server-4.10.1 Details The "user" parameter in the HTTP URI "/sip/session/loginpassword" is inserted into the "run" functi...

samba security, bug fix, and enhancement update

4.15.5-5 - resolves: rhbz2064325 - Fix 'create krb5 conf = yes' when a KDC has a single IP address. 4.15.5-4 - resolves: rhbz2057503 - Fix winbind kerberos ticket refresh 4.15.5-3 - related: rhbz1979959 - Fix typo in testparm output 4.15.5-2 - resolves: rhbz1979959 - Improve idmap autorid sanity...

samba security and bug fix update

4.10.16-17 - related: 2019673 - Add missing checks for IPA DC server role 4.10.16-16 - resolves: 2019661 - Fix CVE-2016-2124 - resolves: 2019673 - Fix CVE-2020-25717 - resolves: 2021428 - Add missing PAC buffer types to krb5pac.idl...

SUSE-SU-2020:1132-1 Security update for samba

This update for samba fixes the following issues: - CVE-2020-10704: Fixed a stack overflow in the AD DC CLDAP server bsc1169851...