The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

Improper access control

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

CVE-2022-20859

CVE-2022-20859 affects Cisco Unified Communications Manager (CUCM), Unified CM IM&P, and Cisco Unity Connection in the Disaster Recovery framework. Root cause: insufficient access control checks allowing an authenticated, read-only user to run a vulnerable command and perform administrative actio...

CVE-2022-20859 Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

CVE-2022-20859 Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

CVE-2022-20859

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

PT-2022-3510 · Cisco · Cisco Unity Connection +2

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unity Connection versions affected versions not specified...

The vulnerability of the Azure Site Recovery disaster recovery tool, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

SQL Injection Vulnerability in Website Building System of Siltronic Technology Limited (CNVD-2022-41797)

Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the website builder system of Siltronic Technology...

Kaseya Unitrends Client/Agent 安全漏洞

Kaseya Unitrends Client/Agent is a cloud-based enterprise backup and disaster recovery technology from Kaseya Corporation, USA. A security vulnerability exists in Kaseya Unitrends Client/Agent version 10.5.5 and prior versions. An attacker can exploit this vulnerability to execute arbitrary code...

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

CVE-2021-43458

An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the 1 hsflowd, 2 VembuBDR360Agent, or 3 VembuOffice365Agent service paths...

Vembu BDR Suite 代码问题漏洞

Vembu BDR Suite is a virtual machine management system. A security vulnerability exists in Vembu BDR Suite 4.2.0.1, no information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

The vulnerability of the Azure Site Recovery recovery tool, related to improper code generation, allows a attacker to execute arbitrary code.

The vulnerability of the Azure Site Recovery disaster recovery tool is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Azure Site Recovery recovery tool, related to improper code generation, allows a attacker to execute arbitrary code.

The vulnerability of the Azure Site Recovery disaster recovery tool is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Azure Site Recovery 代码注入漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to code injection. No details of the vulnerability are currently available...