CVE-2023-27243

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

CVE-2023-27243

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

CVE-2023-27243

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

Design/Logic Flaw

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

CVE-2023-27243

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

CVE-2023-27243

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

CVE-2023-27243: Cleartext Storage of Sensitive Information

An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...

PT-2023-21026

Name of the Vulnerable Software and Affected Versions Makves DCAP version 3.0.0.122 Description The issue allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the "product API". This is an access control issue that can be exploited by sending a specificall...

CVE-2023-27243

CVE-2023-27243 concerns Makves DCAP, version 3.0.0.122, where an access-control flaw can let unauthenticated attackers retrieve cleartext credentials via a crafted request to the product API. The public description and connected documents consistently identify the root cause as improper access co...

Intel® SGX Linux Kernel Drivers Advisory

Summary: A potential security vulnerability in Intel® SGX Linux kernel drivers may allow denial of service. Intel is working with the Linux kernel maintainers to create a mitigation. Vulnerability Details: CVEID: CVE-2021-33135 Description: Uncontrolled resource consumption in the Linux kernel...

PT-2023-4484 · Unknown · Makves Dcap

Name of the Vulnerable Software and Affected Versions: Makves DCAP affected versions not specified Description: The issue is related to insufficient access control in the software, which can be exploited by a remote attacker to bypass existing security restrictions. Recommendations: At the moment...

K04826822: Intel Software Vulnerability CVE-2020-8766

Security Advisory Description Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2020-8766 Impact There is no impact; F5 products are not affected by this vulnerability...

blindai-preview (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-0286 via sgx-dcap-quote-verify-python (0.0.2)

sgx-dcap-quote-verify-python PYPI version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sgx-dcap-quote-verify-python and may be impacted: - blindai-preview =0.0.1, =0.0.4 Source cves: CVE-2023-0286 Source advisory: GHSA-344M-QCJQ-XGRF...

GHSA-344M-QCJQ-XGRF Vulnerable OpenSSL included in sgx-dcap-quote-verify-python

sgx-dcap-quote-verify-python includes a statically linked copy of OpenSSL. The version of OpenSSL included in sgx-dcap-quote-verify-python 0.0.1..0.0.2 is vulnerable to a security issue. More details about the OpenSSL vulnerabilities themselves can be found at...

blindai-preview (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-0286 via sgx-dcap-quote-verify-python (0.0.2)

sgx-dcap-quote-verify-python PYPI version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on sgx-dcap-quote-verify-python and may be impacted: - blindai-preview =0.0.1, =0.0.4 Source cves: CVE-2023-0286 Source advisory: OSV:GHSA-344M-QCJQ-XGRF...

Intel® Processors MMIO Stale Data Advisory

Summary: Potential security vulnerabilities in Memory Mapped I/O MMIO for some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21123 Description: Incomplete cleanup of...

Can Data Protection Systems Prevent Data At Rest Leakage?

Protection against insider risks works when the process involves controlling the data transfer channels or examining data sources. One approach involves preventing USB flash drives from being copied or sending them over email. The second one concerns preventing leakage or fraud in which an inside...

CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2020-8766

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Input validation

Improper conditions check in the IntelR SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access...