CVE-2021-27661 Facility Explorer

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller F4-SNC user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to t...

CVE-2021-27661

CVE-2021-27661 affects Johnson Controls Facility Explorer SNC Series Supervisory Controller (F4-SNC), specifically Version 11. The vulnerability is due to improper privilege management (CWE-269) and could allow an authenticated F4-SNC user to gain unintended access to the controller’s file system...

CVE-2021-27661

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller F4-SNC user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to t...

Johnson Controls Facility Explorer 安全漏洞

Johnson Controls Facility Explorer is a monitoring controller from Johnson Controls that provides scalable system-wide monitoring and control. A security vulnerability exists in Johnson Controls Facility Explorer that stems from improper privilege management and can be exploited by an attacker to...

CVE-2021-27661: Improper Privilege Management

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller F4-SNC user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to t...

PT-2021-17589

Name of the Vulnerable Software and Affected Versions Facility Explorer SNC Series Supervisory Controller F4-SNC affected versions not specified Description The issue allows an authenticated user to gain unintended access to the controller's file system, enabling them to access or modify system...

Johnson Controls Facility Explorer

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Facility Explorer Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated user an unintended...

CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

Code injection

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

CVE-2021-29706

CVE-2021-29706 affects IBM AIX 7.1; vulnerability in the AIX trace facility allows a non-privileged local user to expose sensitive information or cause a denial of service. Affected fileset: bos.mp64 (AIX TLs 7.1.5.x). IBM’s remediation assigns APAR IJ32940 with fixes for 7.1.5.x (7.1.5.6 through...

CVE-2021-29706: Undefined Security Weakness

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

CVE-2021-29706

IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663...

AIX 7.1 TL 5 : trace (IJ32940)

IBM AIX could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. CVE-2021-29706 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory...

There is a vulnerability in the AIX trace facility.

IBM SECURITY ADVISORY First Issued: Tue Jun 15 19:09:20 CDT 2021 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/traceadvisory.asc https://aix.software.ibm.com/aix/efixes/security/traceadvisory.asc...

PT-2021-18421

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.1 Description The issue allows a non-privileged local user to exploit a vulnerability in the trace facility, potentially exposing sensitive information or causing a denial of service. Recommendations For IBM AIX version 7.1,...

SUSE: Security Advisory (SUSE-SU-2018:0822-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Db2 Query Management Facility is vulnerable to an unspecified vulnerability in Java SE - CVE-2020-2773

Summary An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors. Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An unspecifie...

Security Bulletin: Db2 Query Management Facility is vulnerable to CVE-2020-14781 (deferred from Oracle Oct 2020 CPU for Java 8)

Summary Db2 Query Management Facility is vulnerable to CVE-2020-14781 deferred from Oracle Oct 2020 CPU for Java 8 Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to obtain...