Atos Eviden IDRA 安全漏洞

Atos Eviden IDRA is an application from Atos France. A security vulnerability exists in Atos Eviden IDRA versions prior to 2.6.1, which stems from the presence of an incorrect access control vulnerability that allows an attacker to obtain CA signatures in an illegal manner...

Atos Eviden IDRA和Atos Eviden IDCA 安全漏洞

Atos Eviden IDRA and Atos Eviden IDCA are both applications from Atos France. A security vulnerability exists in Atos Eviden IDRA and Atos Eviden IDCA that stems from the presence of a multi-partition privilege override that can lead to the disclosure of sensitive data...

CVE-2024-39328

Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role Config Admin could exceed their configuration privileges in a multi-partition environment and access some confidential data. Data integrity and availability is not at risk...

CVE-2024-39327

Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way...

Atos Eviden IDRA 安全漏洞

Atos Eviden IDRA is an application from Atos France. A security vulnerability exists in Atos Eviden IDRA versions prior to 2.7.1, which stems from a highly trusted role that can exploit a competitive condition to elevate privileges...

CVE-2024-39327

CVE-2024-39327 affects Atos Eviden IDRA before 2.6.1 with an Incorrect Access Control allowing illegitimate CA signing. Related disclosures (CVE-2024-39328 and CVE-2024-51505) describe Insecure Permissions and a race-condition privilege-escalation in Atos Eviden IDRA/IDCA before 2.7.0–2.7.1, enab...

CVE-2024-39328

Atos Eviden IDRA and IDCA prior to version 2.7.0 expose an insecure permissions issue where a Config Admin (highly trusted role) could exceed configuration privileges in a multi‑partition environment and access confidential data. Impact cites data confidentiality only; integrity/availability not ...

CVE-2024-51505

An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role Config Admin could leverage a race condition to escalate privileges...

CVE-2024-51505

CVE-2024-51505 (Atos Eviden IDRA) affects IDRA prior to version 2.7.1. A highly trusted role (Config Admin) could leverage a race condition to escalate privileges, potentially affecting confidentiality and integrity. Related Red Hat entries describe insecure permissions for the same product famil...

CVE-2024-42017

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the...

CVE-2024-42018

An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration...

Atos Eviden SMC xScale 安全漏洞

Atos Eviden SMC xScale is a data driver from Atos France. A security vulnerability exists in Atos Eviden SMC xScale versions prior to 1.6.6, which originates during node initialization, where configuration parameters used for initialization contain credential information that lacks an access...

CVE-2024-42018

An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration...

PT-2024-29690 · Atos · Atos Eviden Smc Xscale

Name of the Vulnerable Software and Affected Versions: Atos Eviden SMC xScale versions prior to 1.6.6 Description: An issue was discovered in Atos Eviden SMC xScale during initialization of nodes, where some configuration parameters are retrieved from management nodes. These parameters embed...

CVE-2024-42018

Summary: Atos Eviden SMC xScale prior to 1.6.6 is affected. During node initialization, configuration parameters retrieved from management nodes may embed credentials, creating potential exposure of HPC configuration secrets. A mitigation preventing access by unprivileged users exists but does no...

CVE-2024-42018

An issue was discovered in Atos Eviden SMC xScale before 1.6.6. During initialization of nodes, some configuration parameters are retrieved from management nodes. These parameters embed credentials whose integrity and confidentiality may be important to the security of the HPC configuration...

CVE-2024-42017

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the...

PT-2024-29689 · Atos · Atos Eviden Icare

Name of the Vulnerable Software and Affected Versions: Atos Eviden iCare versions 2.7.1 through 2.7.11 Description: The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with syst...

CVE-2024-42017

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the...

CVE-2024-42017

An issue was discovered in Atos Eviden iCare 2.7.1 through 2.7.11. The application exposes a web interface locally. In the worst-case scenario, if the application is remotely accessible, it allows an attacker to execute arbitrary commands with system privilege on the endpoint hosting the...