ZyXEL CloudCNM SecuManager Trust Management Issues Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36758)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36759)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

Unspecified Vulnerability in IBM Security Identity Governance and Intelligence (CNVD-2020-31571)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

ceph-ansible: hard coded credential in ceph-ansible playbook

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...

Teclib GLPI Trust Management Issues Vulnerability

Teclib GLPI is an open source IT asset management suite from the French company Teclib. The suite includes features such as device status management, asset inventory storage, management processes and work log management. Teclib GLPI is vulnerable to a trust management issue. The vulnerability ste...

Accellion File Transfer Appliance Trust Management Issues Vulnerability

Accellion File Transfer Appliance is a file transfer appliance from Accellion, USA. The product supports sharing and synchronizing files online using AES 128/256, among other things. A trust management issue vulnerability exists in the Accellion File Transfer Appliance version FTA80540. The...

8x8 Docker Jitsi Meet Trust Management Issues Vulnerability

8x8 Docker Jitsi Meet is a tool for building Jitsi Meet video conferencing solutions in Docker from 8x8 USA. A security vulnerability exists in previous versions of 8x8 Docker Jitsi Meet docker-jitsi-meet stable-4384-1, which stems from the use of default passwords e.g. passw0rd for system...

CVE-2020-11878

The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...

CVE-2020-11878

The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...

Default credentials

The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...

CVE-2020-11878

The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...

CVE-2020-11878

CVE-2020-11878 affects the Jitsi Meet docker-jitsi-meet stack prior to stable-4384-1, where system accounts used default passwords (e.g., passw0rd). The vulnerability is documented across multiple sources (NVD/Red Hat/CNVD/OSV), with high to critical severity in CVSS metrics. Impact is authentica...

Containous Traefik Trust Management Issues Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous USA. A trust management issue vulnerability exists in Containous Traefik version 2.x prior to 2.1.4 and TraefikEE version 2.0.0. The vulnerability stems from the lack of an effective trust management mechanism in a networked...

Citrix Systems SD-WAN Trust Management Issue Vulnerability

Citrix Systems SD-WAN is a suite of software-defined WAN solutions from Citrix Systems USA. A vulnerability with trust management issues exists in Citrix Systems SD-WAN versions 10.2.x prior to 10.2.6 and 11.0.x prior to 11.0.3. The vulnerability stems from the lack of an effective trust manageme...

Flaws Riddle Zyxel’s Network Management Software

Security researchers are warning that networking hardware vendor Zyxel and its Cloud CNM SecuManager software is chock-full of unpatched vulnerabilities that kick open the doors for hackers to exploit. In all, researchers have identified 16 vulnerabilities, ranging from multiple backdoors and...

Flaws Riddle Zyxel’s Network Management Software

Security researchers are warning that networking hardware vendor Zyxel and its Cloud CNM SecuManager software is chock-full of unpatched vulnerabilities that kick open the doors for hackers to exploit. In all, researchers have identified 16 vulnerabilities, ranging from multiple backdoors and...

Opencast Trust Management Issues Vulnerabilities

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A trust management issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from the lack of an effective trust management mechanism in a network...

JetBrains IntelliJ IDEA Operating System Command Injection Vulnerability

JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An operating system command injection vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2019.3. The vulnerability stems from the lack of an effective trust...

CVE-2020-1716

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...