CVE-2014-7392

The CVE refers to the Android app Russian Federation Traffic Rules (com.russia.pdd), version 1.21, which does not verify X.509 certificates from SSL servers. This misconfiguration allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The u...

CVE-2014-7392

The Russian Federation Traffic Rules aka com.russia.pdd application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7392: Undefined Security Weakness

The Russian Federation Traffic Rules aka com.russia.pdd application 1.21 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2013-7367: Undefined Security Weakness

SAP Enterprise Portal does not properly restrict access to the Federation configuration pages, which allows remote attackers to gain privileges via unspecified vectors...

Russia Today (RT) Hacked, "Russian" replaced with "Nazi" in News Headlines

'Russia Today', Moscow based Russia's biggest news channel website RT.com has been hacked and defaced by an unknown group of hackers. Hackers have replaced “Russia” or “Russians” with “Nazi” or “Nazis” word from the headlines, as shown. "RT website has been hacked, we are working to resolve the...

[security bulletin] HPSBGN02925 rev.1 - HP IceWall SSO, IceWall File Manager and IceWall Federation Agent, Multiple Remote Unauthorized Access Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03918632 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03918632 Version: 1 HPSBGN02925 rev....

HP IceWall SSO, IceWall File Manager and IceWall Federation Agent multiple security vulnerabilities

Multiple unauthorized access vulnerabilities...

CVE-2013-4820: Undefined Security Weakness

Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP...

Microsoft Active Directory Federation Services信息泄露漏洞(CVE-2013-3185)(MS13-066)

BUGTRAQ ID: 61672 CVECAN ID: CVE-2013-3185 活动目录（Active Directory）是面向Windows Standard Server、Windows Enterprise Server以及Windows Datacenter Server的目录服务。 Microsoft Active Directory Federation Services...

Microsoft Reissues MS13-066 Windows Server Patch

Microsoft has re-released one of the August security patches for Windows Server 2008 in order to fix a regression issue that would cause some servers to stop working. The MS13-066 patch was released again Monday after Microsoft discovered the problem last week. The patch in the MS13-066 update...

Information disclosure

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

CVE-2013-3185

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

CVE-2013-3185

CVE-2013-3185 affects Microsoft Active Directory Federation Services (AD FS) versions 1.x through 2.1 on Windows Server 2003 R2 SP2, 2008 SP2 and R2 SP1, and 2012. The vulnerability allows remote attackers to disclose information about the AD FS service account, potentially enabling account-locko...

CVE-2013-3185: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Active Directory Federation Services AD FS 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 allows remote attackers to obtain sensitive information about the service account, and possibly conduct account-lockout attacks, by...

Microsoft Active Directory Federation Services information leakage

It's possible to obtain service account information to cause account locking via unsuccessful logon attempts...

Microsoft Active Directory Federation Services Information Disclosure Vulnerability (2873872)

This host is missing an important security update according to Microsoft Bulletin MS13-066. OpenVAS Vulnerability Test $Id: secpodms13-066.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Active Directory Federation Services Information Disclosure Vulnerability 2873872 Authors: Veerendra G.G...

Microsoft Active Directory Federation Services Information Disclosure Vulnerability (2873872)

This host is missing an important security update according to Microsoft Bulletin MS13-066. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-066: Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (2873872)

The remote Windows host is affected by an unspecified vulnerability in the Active Directory Federation Services AD FS that may allow an attacker to obtain the AD FS instance account information. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69331; scriptversion"1.10...

MS13-066: Vulnerability in Active Directory Federation Services could allow information disclosure: August 13, 2013

Resolves a vulnerability in Active Directory Federation Services AD FS that could reveal information that relates to the service account that is used by AD FS.INTRODUCTIONMicrosoft has released security bulletin MS13-066. To view the complete security bulletin, go to the following Microsoft...

Microsoft Active Directory Federation Services CVE-2013-3185 Information Disclosure Vulnerability

Description Microsoft Active Directory Federation Services is prone to an information disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPil...