CVE-2022-24489 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

...

CVE-2022-24489

Technical details about CVE-2022-24489 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories and vendor patches.

CVE-2022-24489: Undefined Security Weakness

Cluster Client Failover CCF Elevation of Privilege Vulnerability...

PT-2022-2891 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Failover Cluster component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: ...

Microsoft Windows Cluster Shared Volume Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Cluster Client Failover. The vulnerability stems from an incorrect programmatic call to an advanced local procedure...

PT-2022-29018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.16.11 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in version...

PT-2022-29226

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.304 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have not...

PT-2022-29207

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.269 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The actual impact and potential for...

PT-2022-29084

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.15.25 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have no...

PT-2022-29135

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.13 through 5.10.102 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The problem was introduced in versio...

PT-2022-29188

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.232 Description The issue concerns the handling of the outer IP header in certain cases, specifically with IP-in-IP IPIP and net failover configurations. The actual impact and potential for attack have not...

PT-2022-29165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description The issue concerns the handling of outer IP headers in certain network configurations, specifically in cases involving IP-in-IP IPIP and net failover. The actual impact and potential for atta...

Security Bulletin: IBM Data Management Platform for EDB Postgres Standard is vulnerable to denial of service and arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary IBM Data Management Platform for EnterpriseDB EDB Postgres Standard contains a component called EDB Failover Manager EFM and uses a version of Apache Log4j that impacts high availability in EDB. The upgraded EFM product contains Apache Log4j 2.17.1. Vulnerability Details CVEID:...

Security Bulletin: IBM Data Management Platform for EDB Postgres Enterprise is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-45105, CVE-2021-45046)

Summary IBM Data Management Platform for EnterpriseDB EDB Postgres Enterprise contains a component called EDB failover manager EFM and uses a version of log4j that impacts high availability in EDB. The upgraded EFM product contains Apache Log4j 2.17.1. Vulnerability Details CVEID: CVE-2021-45105...

[SECURITY] Fedora 35 Update: keepalived-2.2.4-2.fc35

Keepalived provides simple and robust facilities for load balancing and high availability to Linux system and Linux based infrastructures. The load balancing framework relies on well-known and widely used Linux Virtual Server IPVS kernel module providing Layer4 load balancing. Keepalived implemen...

FatPipe WARP, IPVPN and MPVPN have unspecified vulnerabilities (CNVD-2021-101931)

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover as a result of a WAN component or service failure resulting in a data line connection outage.FatPipe WARP, IPVPN and MPVPN have a security vulnerability that could be exploited by a...

USN-5188-1: Keepalived vulnerability

It was discovered that Keepalived incorrectly handled certain messages. An attacker could possibly use this issue to access-control bypass...

F5 Networks BIG-IP : TMM vulnerability (K10751325)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.6 / 13.1.4 / 14.1.4 / 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K10751325 advisory. - On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x...

Patch now to bypass Firefox add-ons that abuse the proxy API to deny updates

In a Firefox security announcement, Mozilla said 455,000 users have downloaded Firefox add-ons that interfere with how they connect to the internet. The interference in itself was not the deciding factor, however. The add-ons abused the proxy API to prevent users who had installed them from...

Session reliability feature doesn't restore session when ICA AppFlow is enabled

Session Reliability Feature Does Not Restore Session When ICA AppFlow is Enabled and NetScaler High Availability Failover Occurs When AppFlow Logging is enabled on NetScaler Gateway virtual server, NetScaler failover causes ICA sessions to disconnect...