Credential Disclosure Through Logs

github.com/ydb-platform/ydb-go-sdk is vulnerable to Information Disclosure. The vulnerability is due to a custom implementation of the credentials interface. During logging, the credentials are directly serialized into the error message. If an application defines a custom credential interface, an...

CVE-2023-45809 Disclosure of user names via admin bulk action views in wagtail

Wagtail is an open source content management system built on Django. A user with a limited-permission editor account for the Wagtail admin can make a direct URL request to the admin view that handles bulk actions on user accounts. While authentication rules prevent the user from making any change...

Information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 240454...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Ansible vulnerabilities (USN-5315-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5315-1 advisory. It was discovered that Ansible did not properly manage directory permissions when running playbooks with an...

Director - "Cannot Retrieve the Data" error shows in Logon Duration

After log into Citrix Director or Cloud Monitor, "Cannot Retrieve the Data" error is shown in Logon Duration. Error message received: "Data cannot be retrieved. Logon duration data is not available for the current session."...

Reporting: "Error retrieving data source. Return code=257. Error message=Operation not permitted."

The message "Error retrieving data source. Return code = 257. Error message = Operation not permitted" is displayed when clicking Reporting on NetScaler:...

Fail to enumerate resource with "Cannot complete your request "error after configure SAML

Fail to enumerate resource with "Cannot complete your request "error after configure SAML All users have the same issue Issue happen after click "detect Workspace" on Storefront web...

The vulnerability of quality management software for automobile manufacturers, related to the leakage of information in error messages, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the leakage of information in error messages. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Siemans QMS Automotive

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Authorization Bypass

Keylime is vulnerable to an attack which allows an attacker to Bypass the Challenge-Response Protocol during agent registration. The vulnerability occurs due to the registrar disclosing the correct "authtag" in the error message. This could allow an attacker to simply record the correct expected...

Potential Out-of-Bounds Error When Modifying Ranges

Lines of code Vulnerability details The method allows for the modification of a range based on an index. However, there's no explicit check to ensure that the provided indexToModify is within the bounds of the ranges array. If an out-of-bounds index is provided, the method will throw a generic...

GHSA-F4R5-Q63F-GCWW Keylime registrar and (untrusted) Agent can be bypassed by an attacker

Impact A security issue was found in the Keylime registrar code which allows an attacker to effectively bypass the challenge-response protocol used to verify that an agent has indeed access to an AIK which in indeed related to the EK. When an agent starts up, it will contact a registrar and provi...

Jenkins Plugin AWS CodeCommit Trigger Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

Error "Try again after some time or contact your help desk" after authentication passed

After inputting your username and password to "https://x.x.x.x/manageotp" page, you are encountering an error message that says, "Try again after some time or contact your help desk " "Rejecting with error code 4009 “， ”receiveldapusersearchevent:ldapfirstentryreturned null, user XXX not found “...

OTP device test error "Failed to verify OTP from. Please ensure Citrix ADC is synced to NTP time"

OTP registered device test error "Failed to verify OTP. Please make sure Citrix ADC is synced to NTP time. "...

Tenda AC6 安全漏洞

The Tenda AC6 is a wireless router from the Chinese company Tenda. A denial of service vulnerability exists in the Tenda AC6. The vulnerability stems from a failure to properly handle incoming error messages and can be exploited to cause a denial of service device crash via a long string in the...

-pattern parameter in the rewrite action was removed in 13.1

When user configure rewrite action with pattern param in GUI or CLI in NS 13.1, below error may prompt:"ERRO: No such argument -pattern" e.g add rewrite action rwainsertintracaptchaag insertbeforeall "HTTP.RES.BODY8000.SETTEXTMODEIGNORECASE" q" " + "" -pattern "" ERROR: No such argument -pattern...

Prompt Error "Feature is not implemented" after Read-Only users login GUI

Read-only user login GUI and get an error "Feature is not implemented"...

"Not authorized to execute this command" error for External Authentication System User

After login ADC management GUI using local AD user, belowError message prompt: "2 errors encountered. Not authorized to execute this command show ns license Not authorized to execute this command show ns feature"...

"This Apple ID can't be used to make purchases" error when installing Secure Hub on DEP devices

When attempting to download and install the Citrix Secure Hub app on devices enrolled through the Device Enrollment Program DEP using a Managed Apple ID in Apple Business Manager ABM, users may encounter the error message: "This Apple ID can't be used to make purchases."...