1041 matches found
CVE-2017-6711
A vulnerability in the Ultra Automation Service UAS of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device. The vulnerability is due to an insecure default configuration of the Apache ZooKeeper service used by the...
CVE-2017-8840
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...
Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
Application: Oracle E-Business Suite Versions Affected: Oracle EBS 12.2.3 Vendor URL: http://oracle.com Bug: SQL injection Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Author: Dmitry Chastuhin ERPScan Description 1. ADVISORY...
Kong and Wallarm Partner Up to Boost Microservices API Security
Wallarm has partnered with Mashape to provide the microservices community with API security. Mashape enterprise customers who use Kong API gateway can now quickly add API security protection without change in Kong user’s deployment. Read more about Kong and Wallarm partnership in this blog. Today...
Supply Chain Security: Akamai from a Customer's Risk Perspective
Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...
How to Enable HA Using XenServer CLI
This article describes how to enable HA using XenServer CLI. HA can be enabled on a pool using either XenCenter or the command-line interface. In either case, you will specify a set of priorities that determine which VMs should be given highest restart priority when a pool is over committed...
Configuring PVS for High Availability with UEFI Booting and PXE service
Provisioning server - cannot load balance or HA...
F5 Networks BIG-IP : BIND vulnerability (K40181790)
named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DS resource record in an answer.CVE-2016-9444 Impact When the BIND recursion option is enabled, an...
F5 BIG-IP - TMM iRules vulnerability CVE-2016-5024
On a BIG-IP LTM with a virtual server configured to parse RADIUS messages via an iRule, a remote attacker may be able to cause TMM to restart using malicious network traffic. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
[SECURITY] Fedora 25 Update: pacemaker-1.1.15-3.fc25
Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...
[SECURITY] Fedora 23 Update: pacemaker-1.1.15-2.fc23
Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...
Legal Robot: Missing restriction on string size in profile fields
Security researcher reported that there was no restriction on the amount of text that could be inserted into a user's profile field. The researcher also demonstrated that when the text size was large enough the service was restarted, resulting in a momentary outage in our non-production environme...
[SECURITY] Fedora 24 Update: pacemaker-1.1.15-2.fc24
Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...
How to Use NetScaler SNIP for Authentication (AAA) Server Communication
This article describes how to use NetScaler SNIP for authentication server communication. Background Authentication server communication on NetScaler is by default done using the NetScaler IPNSIP. So, apart from it being used for management purposes, it is also used as a source IPfor LDAP, RADIUS...
High Availability Failovers Due to Missed HA HeartBeats of NetScaler VPX on VMware ESX Hypervisor
NetScaler VPX on VMWare hypervisor High Availability failsover due to missed HA heartbeats. Note : This article only pertains to NetScaler VPX on VMWare hypervisor. Background Root cause of the HA failovers is missing heartbeats due to VPX scheduling issues on the VMware host. The NetScaler’s...
Error when trying to disable HA on XenServer
When trying to disable HA for the pool, we are getting the following error xe pool-ha-disableThe uuid you supplied was invalid.type: VDIuuid: 87ca6afc-b0ad-4e54-bb5e-313dddd77ea2...
XenCenter System Alerts
The following table displays the system events/conditions that will a trigger an alert to be displayed in XenCenter System Alerts window. XenCenter System Alerts You can view a range of different types of alert in theSystem Alertswindow, including: Performance alerts. Performance alerts may be...
FortiWLC Undocumented Hardcoded Rsync Account
FortiWLC runs a rsyncd server, historically used for High-Availability purpose. This server comes with a hardcoded account, which has read/write privileges over various parts of the system...
